CVE-2021-24707
Learning Courses < 5.0 - Admin+ Stored Cross-Site Scripting
The Learning Courses WordPress plugin before 5.0 does not sanitise and escape the Email PDT identity token settings, which could allow high privilege users to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →