plugin

Lifterlms Gateway Paypal Vulnerabilities

1 known security issue reported for the Lifterlms Gateway Paypal WordPress plugin. Most recent disclosed Apr 13, 2022.

1 medium

Running Lifterlms Gateway Paypal on your site? Check whether your installed version is affected.

Scan your site free

LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting

medium

The LifterLMS PayPal WordPress plugin before 1.4.0 does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue

CVSS:: 6.1
Affected:: up to 1.4.0
Fixed in:: 1.4.0
Disclosed:: Apr 13, 2022

CVE-2022-1250 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database