Unrated

LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting

CVE-2022-1250 First seen on SecPulse May 3, 2022

Original description The description as published by the source.

The LifterLMS PayPal WordPress plugin before 1.4.0 does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web make.lifterlms.com
web wpscan.com

Key facts

Severity: Unrated
Published: May 3, 2022
First seen on SecPulse: May 3, 2022
CWE: CWE-79

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:55