.. / CVE-2022-0271

• XSS
• Nuclei
• Web

Exploit for LearnPress <4.1.6 - Cross-Site Scripting (CVE-2022-0271)

Description:

WordPress LearnPress plugin before 4.1.6 contains a cross-site scripting vulnerability. It does not sanitize and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email AJAX action.

Nuclei Template

View the template here CVE-2022-0271.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-0271.yaml

References: