WordPress Plugin Vulnerabilities

LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting

Description

The plugin does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue

Proof of Concept

Affects Plugins

Plugin icon
lifterlms-gateway-paypal
Fixed in 1.4.0

References

CVE
CVE-2022-1250
URL
https://make.lifterlms.com/2022/04/04/lifterlms-paypal-version-1-4-0/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
4.7 (medium)

Miscellaneous

Original Researcher
Brandon James Roldan
Submitter
Brandon James Roldan
Submitter website
https://tomorrowisnew.com/
Submitter twitter
tomorrowisnew_
Verified
Yes
WPVDB ID
1f8cb0b9-7447-44db-8d13-292db5b17718

Timeline

Publicly Published
2022-04-04 (about 3 years ago)
Added
2022-04-06 (about 3 years ago)
Last Updated
2022-04-13 (about 3 years ago)

Other

Published
Title
Published
2024-10-24
Title
Textboxes <= 0.1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-06-15
Title
MasterStudy LMS < 3.0.9 - Contributor+ Stored XSS
Published
2023-02-02
Title
Image Hover Effects for Elementor with Lightbox and Flipbox < 3.0 - Reflected XSS
Published
2024-07-09
Title
Login by Auth0 < 4.6.1 - Reflected Cross-Site Scripting via wle
Published
2025-02-11
Title
Marketing Automation < 1.2.6.9 - Reflected Cross-Site Scripting