The LearnPress WordPress plugin before 4.1.4 does not... · CVE-2021-24951 · GitHub Advisory Database · GitHub

The LearnPress WordPress plugin before 4.1.4 does not...

Critical severity Unreviewed Published Dec 14, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The LearnPress WordPress plugin before 4.1.4 does not sanitise, validate and escape the id parameter before using it in SQL statements when duplicating course/lesson/quiz/question, leading to SQL Injections issues

References

Published by the National Vulnerability Database

Dec 13, 2021

Published to the GitHub Advisory Database Dec 14, 2021

Last updated Feb 1, 2023