Skip to content
OpenAdvisories
High · 7.1 CVE-2024-37436 EUVD-2024-36663GHSA-hwr5-x65h-95g3

WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Published Jul 22, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Reflected XSS.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a before 4.1.4.1.

Affected products

VendorProductAffectedFixed
Uncanny Owl Uncanny Toolkit Pro for LearnDash < 4.1.4.1 4.1.4.1

References