← voltar
CVE-2022-1724CWE-79

Simple Membership < 4.1.1 - Reflected Cross-Site Scripting

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 1.8%
probabilidade de exploração
1.8%top 23% das CVEs
exploração observada
nãonenhuma fonte reporta
The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting