CVE-2020-35650: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Uncanny Groups for LearnDash before v3.7 allow authenticated remote attackers to inject arbitrary JavaScript or HTML via the ulgmcoderedeem POST Parameter in user-code-redemption.php, the ulgmuserfirst POST Parameter in...

PT-2020-17375

Name of the Vulnerable Software and Affected Versions Uncanny Groups for LearnDash versions prior to 3.7 Description Multiple cross-site scripting XSS vulnerabilities allow authenticated remote attackers to inject arbitrary JavaScript or HTML via various parameters. The affected parameters includ...