TI-2025-12695 CVE-2025-13893 · GHSA-g36m-9jqw-jhm4
Lesson Plan Book <= 1.3 - Reflected Cross-Site Scripting
Priority LOW 27
The Lesson Plan Book plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to, and including, 1.3 due to insufficient input sanitization and outpu…