CVE-2020-9439

https://notcve.org/view.php?id=CVE-2020-9439

23 Dec 2020 — Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the search_key GET Parameter in TinCan_Content_List_Table.php, message GET Parameter in licensing.php, tc_filter_group parameter in reporting-admin-menu.php, tc_filter_user parameter in reporting-admin-menu.php, tc_filter_course parameter in reporting-admin-menu.php, tc_filter_lesson parameter in reporting-admin-menu.ph... • https://gist.github.com/michiiii/9501b878e7ba3c9fc2a7407ff8277fa5 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •