CVE-2024-56938

Summary

CVE-2024-56938 is a stored cross-site scripting (XSS) vulnerability affecting LearnDash version 6.7.1. An attacker can inject malicious scripts into a learning material, which is then stored on the server and executed in the browser of unsuspecting users who view the affected material. The vulnerability can lead to data theft, unauthorized account takeover, and other malicious activities. Users are strongly advised to update to the latest LearnDash version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.