Design/Logic Flaw

The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field...

CVE-2020-7108

The CVE-2020-7108 entry concerns LearnDash LMS for WordPress. Affected software: LearnDash LMS plugin versions prior to 3.1.2. Root cause: reflected cross-site scripting via the ld-profile search field, enabling attacker-controlled input to be reflected in the output. Impact: XSS vulnerability in...

CVE-2020-7108

The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field...

WordPress LearnDash LMS premium plugin <= 3.1.1.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Jinson Varghese Behanan in WordPress LearnDash LMS premium plugin versions = 3.1.1.1. Solution Update the WordPress LearnDash LMS premium plugin to the latest available version at least 3.1.2...