CVE-2022-1250

The LifterLMS PayPal WordPress plugin before 1.4.0 does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue...

CVE-2022-1250

creationtimestamp| type| source ---|---|--- 2022-05-02 20:28:00+00:00| seen| https://t.me/cibsecurity/41735...

CVE-2022-1250

The CVE-2022-1250 entry pertains to the WordPress LifterLMS PayPal plugin prior to version 1.4.0, where parameters from the payment confirmation page are not properly sanitised/escaped before being echoed, causing a Reflected Cross‑Site Scripting vulnerability. Affected product: LifterLMS PayPal ...