Description
Learning with Texts (LWT) 2.0.3 is vulnerable to Cross Site Scripting (XSS). The application has a specific function that does not filter special characters in URL parameters. Remote attackers can inject JavaScript code without authorization. Exploiting this vulnerability, attackers can steal user credentials or execute actions such as injecting malicious scripts or redirecting users to malicious sites.
INFO
Published Date :
2024-08-21T00:00:00.000Z
Last Modified :
2025-03-18T18:15:09.489Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2024-41572 vulnerability.
| Vendors | Products |
|---|---|
| Lang-learn-guy |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-41572.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact