CVE-2024-41572

6.1 mediumEPSS 0.3%

Learning with Texts (LWT) 2.0.3 is vulnerable to Cross Site Scripting (XSS). The application has a specific function that does not filter special characters in URL parameters. Remote attackers can inject JavaScript code without authorization. Exploiting this vulnerability, attackers can steal user credentials or execute actions such as injecting malicious scripts or redirecting users to malicious sites.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-08-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lang-learn-guy:learning_with_texts

References

https://medium.com/%40ChadSecurity/cve-2024-41572-68397fae354b

Check your stack JSON