CVE-2021-47975
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
May 16, 2026
Vendor
unknown
Description
WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the fieldtitle parameter. Attackers can submit POST requests to the jslm_fieldordering page with XSS payloads in the fieldtitle field to execute arbitrary JavaScript when administrators view the field ordering interface.