Non évaluée

LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes < 8.0.1 - Reflected XSS

CVE-2024-13619 Première détection SecPulse May 16, 2025

Description d'origine La description telle que publiée par la source (souvent en anglais).

The LifterLMS WordPress plugin before 8.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com

Faits clés

Gravité: Non évaluée
Publication: May 16, 2025
Première détection SecPulse: May 16, 2025

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:02