Beveiligingsadvies

CVE-2021-47975

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-16 15:26:15

Laatst bijgewerkt 2026-05-26 11:51:44

Toegewezen door VulnCheck

CVSS-score 7.2

Status PUBLISHED

Beschrijving

WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the `fieldtitle` parameter. Attackers can submit POST requests to the jslm_fieldordering page with XSS payloads in the fieldtitle field to execute arbitrary JavaScript when administrators view the field ordering interface.

← Alle CVE's bekijken Bekijk op cve.org ↗