Lucene search
+L

3 matches found

NVD
NVD
added 2024/04/09 7:15 p.m.13 views

CVE-2024-1463

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Course, Lesson, and Quiz title and content in all versions up to, and including, 4.2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for...

4.8CVSS4.3AI score0.00426EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/09 6:59 p.m.17 views

CVE-2024-1463 LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Course, Lesson, and Quiz title and content in all versions up to, and including, 4.2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for...

4.4CVSS7.4AI score0.00426EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/09 6:59 p.m.28 views

CVE-2024-1463 LearnPress <= 4.2.6.3 - Authenticated(LP Instructor+) Stored Cross-Site Scripting

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Course, Lesson, and Quiz title and content in all versions up to, and including, 4.2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for...

4.4CVSS4.5AI score0.00426EPSS
SaveExploits0References2
Rows per page
Query Builder