CVE-2020-7108

Description

References

• packetstormsecurity.com/files/156275/LearnDash-WordPress-LMS-3.1.2-Cross-Site-Scripting.html · Exploit
• learndash.releasenotes.io/release/uCskc-version-312 · Release Notes
• wpvulndb.com/vulnerabilities/10026 · Third Party Advisory
• getastra.com/blog/911/plugin-exploit/reflected-xss-vulnerability-found-in-learndash-lms-plugin · Third Party Advisory
• jinsonvarghese.com/reflected-xss-in-learndash-wordpress-plugin · Third Party Advisory

Más vulnerabilidades de learndash

• CVE-2024-56940ALTO 7.5An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file upl…
• CVE-2024-56939MEDIO 5.4LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment-body class.
• CVE-2024-56938MEDIO 5.4LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-content class.
• CVE-2024-1210MEDIO 5.3The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API.…
• CVE-2024-1209MEDIO 5.3The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via dire…