Security Advisory

CVE-2022-0271

6.1
MEDIUM

Vulnerability Description

The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email AJAX action, leading to a Reflected Cross-Site Scripting
Published Date April 11, 2022
Official Source NIST NVD Advisory