CVE WATCH / VULNERABILITY DETAIL
CVE-2026-119098
MEDIUMCVSS 6.4NVD feed
Published 7 November 2026 · tracked since 7 November 2026
Description
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'answer[]' parameter in all versions up to, and including, 10.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authentic
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-120043 HIGH 7.5
- CVE-2026-119167 HIGH 7.2
- CVE-2026-110534 MEDIUM 6.4
- CVE-2026-19803 CRITICAL 9.8
- CVE-2026-121516 MEDIUM 6.1
- CVE-2026-120739 HIGH 7.2
- CVE-2026-120677 HIGH 7.2
- CVE-2026-120560 MEDIUM 6.5
- CVE-2026-119158 HIGH 7.2
- CVE-2026-93754 CRITICAL 9.8