CVE-2021-24707
01.02.2022, 13:15
The Learning Courses WordPress plugin before 5.0 does not sanitise and escape the Email PDT identity token settings, which could allow high privilege users to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
| Vendor | Product | Version |
|---|---|---|
| nd-learning_project | nd-learning | 𝑥 < 5.0 |
𝑥
= Vulnerable software versions