CVE-2022-0271

MEDIUM · CVSS 6.1 EPSS 2.25%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-04-11 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-0271

Severity

MEDIUM

CVSS

6.1

EPSS

2.25%

WordPress

Original NVD Description

The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email AJAX action, leading to a Reflected Cross-Site Scripting