cve/2020/CVE-2020-7108.md

CVE-2020-7108

Description

The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.

POC

Reference

• http://packetstormsecurity.com/files/156275/LearnDash-WordPress-LMS-3.1.2-Cross-Site-Scripting.html
• https://wpvulndb.com/vulnerabilities/10026

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Live-Hack-CVE/CVE-2020-7108
• https://github.com/jinsonvarghese/jinsonvarghese
• https://github.com/unifuzz/getcvss