A reflected XSS vulnerability in the LearnPress plugin allows attackers to execute malicious code in the browsers of authenticated instructors or administrators.

This is a reflected cross-site scripting (XSS) vulnerability (CWE-79) where an unescaped search parameter allows an attacker to inject malicious scripts that execute when a logged-in instructor or administrator interacts with a crafted link.

With a CVSS score of 7.1, this vulnerability presents a significant risk to the security of user sessions. By tricking privileged users into clicking malicious links, attackers can steal session cookies or perform unauthorized actions on behalf of the victim, leading to potential data exposure or unauthorized platform configuration changes.

Immediate Action: Update the LearnPress plugin to version 4.4.1 or later to remediate the input validation flaw.

Proactive Monitoring: Monitor for suspicious referral traffic or unusual URL parameters that appear to contain script tags.

Compensating Controls: Implement a Content Security Policy (CSP) to restrict the execution of unauthorized scripts and use a WAF to filter reflected XSS patterns.

Public Exploit Available: Yes, public proof-of-concept exploits are available.

Administrators should update LearnPress to version 4.4.1 immediately to address this reflected XSS vulnerability. Additionally, educate staff on the risks associated with clicking untrusted links while logged into administrative portals.