CVE-2024-4277

MEDIUM

LearnPress - WordPress LMS Plugin <4.2.6.5 - XSS

Title source: llm

Description

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘layout_html’ parameter in all versions up to, and including, 4.2.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

References (2)

[Broken Link] https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.5/inc/ExternalPlugin/Elementor/Widgets/Instructor/ListInstructorsElementor.php?order=date#L96

[Third Party Advisory] https://www.wordfence.com/threat-intel/vulnerabilities/id/46693edf-bcc6-4af8-9f26-5ede865f4694?source=cve

Scores

CVSS v3 6.4

EPSS 0.0020

EPSS Percentile 41.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Classification

CWE

CWE-79

Status published

Affected Products (1)

thimpress/learnpress < 4.2.6.6

Timeline

Published May 14, 2024

Tracked Since Feb 18, 2026