CVE-2022-0271CWE-79

LearnPress < 4.1.6 - Reflected Cross-Site Scripting

published April 11, 2022

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email AJAX action, leading to a Reflected Cross-Site Scripting

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01944 · 80.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-04-11T14:40Z
EPSS history
Timeline
  • 11 APR 14:40Z
    LearnPress < 4.1.6 - Reflected Cross-Site Scripting
    cvelistv5