CVE-2023-4602

CVE-2023-4602 (Namaste! LMS, WordPress) shows a reflected XSS in the course_id parameter. The vulnerability affects Namaste! LMS up to version 2.6.1.1 and is exploitable by unauthenticated attackers who can trick a user into performing an action (e.g., clicking a link) to execute arbitrary script...

WordPress Namaste! LMS Plugin <= 2.6.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Namaste! LMS Type Plugin Vulnerable versions = 2.6.1.1 Fixed in 2.6.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4602 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 31640ca97ff3 Credits Vincenzo Turturro...