Vulnerability · Published May 24, 2021 · Assigned by WPScan
CVE-2021-24308LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile
Medium 5.4
In plain English
A medium-severity cross-site scripting in LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress from LifterLMS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.2% (higher than 88% of all known vulnerabilities).
Official description
The 'State' field of the Edit profile page of the LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.1 is not properly sanitised when output in the About section of the profile page, leading to a stored Cross-Site Scripting issue. This could allow low privilege users (such as students) to elevate their privilege via an XSS attack when an admin will view their profile.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| LifterLMS | LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress | 4.21.1 – before 4.21.1 |
Weakness: CWE-79