Approved changes feed: RSS · Atom

cpe:2.3:a:wplearnmanager:wp_learn_manager:1.0.8:*:*:*:*:wordpress:*:*

part: a version: 1.0.8 update: *

VendorWplearnmanager (33f843ec-cdca-5887-99c3-b3217d1c737a)
ProductWp Learn Manager (ade14e68-b48a-577f-b7de-edf9d26f6075)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47975 vulnerable 2026-06-08 05:38:08.025108 WordPress Plugin WP Learn Manager 1.1.2 Stored XSS
HIGH (7.2)
WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the `fieldtitle` parameter. Attackers can submit POST requests to the jslm_fieldordering page with XSS payloads in the fieldtitle field to execute arbitrary JavaScript when administrators view the field ordering interface.
Published: 2026-05-16T15:26:15.528Z
Updated: 2026-05-26T11:51:44.939Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.