CVE-2021-24308

creationtimestamp| type| source ---|---|--- 2021-05-28 09:45:28+00:00| seen| https://t.me/pwnwikizhchannel/518...

WordPress LifterLMS 4.21.0 Cross Site Scripting

Exploit Title: WordPress Plugin LifterLMS 4.21.0 - Stored Cross-Site Scripting XSS Date: 2021-05-10 Exploit Author: Captainhook Vendor Homepage: https://lifterlms.com/ Software Link: https://github.com/gocodebox/lifterlms/releases/tag/4.21.0 Version: LifterLMS alert/XSS/ 3- The XSS will be stored...

WordPress Plugin LifterLMS 4.21.0 - Stored Cross-Site Scripting (XSS)

Exploit Title: WordPress Plugin LifterLMS 4.21.0 - Stored Cross-Site Scripting XSS Date: 2021-05-10 Exploit Author: Captainhook Vendor Homepage: https://lifterlms.com/ Software Link: https://github.com/gocodebox/lifterlms/releases/tag/4.21.0 Version: LifterLMS alert/XSS/ 3- The XSS will be stored...

CVE-2021-24308

CVE-2021-24308 affects WordPress plugin LifterLMS (LMS by LifterLMS) before version 4.21.1. The issue is a stored XSS in the State field of the Edit Profile page, where input is not properly sanitized when rendered in the About section, potentially allowing low-privilege users (e.g., students) to...

CVE-2021-24308 LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile

The 'State' field of the Edit profile page of the LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.1 is not properly sanitised when output in the About section of the profile page, leading to a stored Cross-Site Scripting issue. Thi...