CVE-2022-1724

The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting

Score

CVSS 3.1 6.1 Medium

Status

Modified - contact@wpscan.com

Published

2022-06-13

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Simple Membership (Simple-membership-plugin)
• Simple Membership (Unknown)

References

• https://wpscan.com/vulnerability/96a0a667-9c4b-4ea6-b78a-0681e9a9bbae