Medium severity · published Aug 2, 2021
CVE-2021-24504
The WP LMS – Best WordPress LMS Plugin WordPress plugin through 1.1.2 does not properly sanitise or validate its User Field Titles, allowing XSS payload to be used in them
6.1
CVSS
0.8%
EPSS
No
On KEV
Description
The WP LMS – Best WordPress LMS Plugin WordPress plugin through 1.1.2 does not properly sanitise or validate its User Field Titles, allowing XSS payload to be used in them. Furthermore, no CSRF and capability checks were in place, allowing such attack to be performed either via CSRF or as any user (including unauthenticated)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WL
WP Learn Manager · Wplearnmanager
through 1.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-24504
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-24504
Exploit
https://wpscan.com/vulnerability/e0182508-23f4-4bdb-a1ef-1d1be38f3ad1
More from WP Learn Manager
7.2
CVE-2021-47975
WordPress Plugin WP Learn Manager 1.1.2 Stored XSS