Lucene search

K
osvGoogleOSV:CVE-2022-1250
HistoryMay 02, 2022 - 4:15 p.m.

CVE-2022-1250

2022-05-0216:15:08
Google
osv.dev
7
lifterlms
paypal
wordpress
reflected cross-site scripting

AI Score

6

Confidence

High

EPSS

0.001

Percentile

36.9%

The LifterLMS PayPal WordPress plugin before 1.4.0 does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue

AI Score

6

Confidence

High

EPSS

0.001

Percentile

36.9%