Stored XSS in LearnPress WordPress Plugin

Executive Summary

This is a stored cross-site scripting (XSS) vulnerability in the LearnPress WordPress Plugin before version 4.4.6. Authenticated attackers with the Instructor role can inject malicious JavaScript into quiz question answer title fields. The payload persists and executes in the browsers of users viewing the affected quiz, including students, instructors, and administrators.

Useful 0 Not Useful 0

Detection Guidance

Check for LearnPress plugin versions before 4.4.6. Inspect quiz question answer title fields for unsanitized input or stored JavaScript payloads. Review browser console logs for unexpected script execution when viewing quizzes.

Useful 0 Not Useful 0

Impact Analysis

An attacker could steal session cookies, redirect users to malicious sites, or perform actions on their behalf. Users viewing the compromised quiz may have their data exposed or their accounts compromised. The impact depends on user privileges and the nature of the injected payload.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's integrity and confidentiality principles or HIPAA's safeguards for protected health information. Organizations may face compliance breaches if user data is compromised through this exploit.

Useful 0 Not Useful 0

Mitigation Strategies

Update LearnPress plugin to version 4.4.6 or later immediately. Remove any suspicious quiz questions with unsanitized input. Implement input validation and output escaping for all user-submitted content.

Useful 0 Not Useful 0