https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T03:12:24.270659+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-86444 CVE-2026-86444 — LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter 2026-10-01T03:12:24.272952+00:00

Affected: Unknown LearnPress

The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, including a logged in administrator. Only sites running a classic, non-block are affected.