TI-2021-06989 CVE-2021-24707 · GHSA-ch5x-pm84-3rw7Learning Courses < 5.0 - Admin+ Stored Cross-Site ScriptingPriority LOW 23The Learning Courses WordPress plugin before 5.0 does not sanitise and escape the Email PDT identity token settings, which could allow high privilege users to perform cross-Site Scripting attacks even when the unfiltered…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00598 · Published 2022-02-01 · No fix listed CWE-79