CVE-2023-5558

LearnPress < 4.2.5.5 - Reflected Cross-Site Scripting

Medium · published January 16, 2024

CVSS v3.1
6.1
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

The LearnPress WordPress plugin before 4.2.5.5 does not sanitise and escape user input before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00908 · 59.6th percentile
Published
2024-01-16T15:54Z
EPSS history
Timeline
  • 16 JAN 15:54Z
    LearnPress < 4.2.5.5 - Reflected Cross-Site Scripting
    cvelistv5