PT-2021-15845 · Lifterlms · Lms By Lifterlms

Amirmohammad Vakili + 1 · Published 2021-05-24 · Updated 2021-06-03 · CVE-2021-24308

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress versions prior to 4.21.1

Description The issue arises from the improper sanitization of the State field in the Edit profile page, which can lead to a stored Cross-Site Scripting issue when output in the About section of the profile page. This could allow low-privilege users, such as students, to elevate their privileges via an XSS attack when an admin views their profile.

Recommendations For versions prior to 4.21.1, update to version 4.21.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Edit profile page and the About section of the profile page to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-24308

Affected Products

Lms By Lifterlms

References · 8

• 🔥 https://exploit-db.com/exploits/49912 · Exploit
• 🔥 http://packetstormsecurity.com/files/162856/WordPress-LifterLMS-4.21.0-Cross-Site-Scripting.html · Exploit
• 🔥 https://wpscan.com/vulnerability/f29f68a5-6575-441d-98c9-867145f2b082 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24308 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24308 · Vendor Advisory
• https://github.com/gocodebox/lifterlms/releases/tag/4.21.1 · Note
• https://t.me/cvenotify/15228 · Telegram Post
• https://t.me/cvenotify/15216 · Telegram Post