CVE-2021-24707
Assigner: WPScan
Published: 2022-02-01T12:21:20
State: PUBLISHED
affected: product: n/a
vendor: n/a
versions: status: affected
version: n/a
credits: value: dhananjaygarg192002
descriptions: value: The Learning Courses WordPress plugin before 5.0 does not sanitise and escape the Email PDT identity token settings, which could allow high privilege users to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
problemTypes: descriptions: description: n/a
type: text
source: discovery: EXTERNAL
title: Learning Courses < 5.0 - Admin+ Stored Cross-Site Scripting
x_generator: WPScan CVE Generator