Security Advisory

CVE-2022-1250

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-05-02 16:05:50

Last updated 2024-08-02 23:55:24

Assigner WPScan

State PUBLISHED

Description

The LifterLMS PayPal WordPress plugin before 1.4.0 does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue

← Browse all CVEs View on cve.org ↗