Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction, 5708b3793b779fb48cd7f339c6b16ca9bf249c39

CVE, Research URL: 5708b3793b779fb48cd7f339c6b16ca9bf249c39
Home page URL: Security reports for Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
Application: Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
Published on: Aug 06, 2021
Research Description: Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction [paid-member-subscriptions] < 2.4.2 Paid Member Subscriptions <= 2.4.1 - Reflected Cross-Site Scripting The Paid Member Subscriptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 2.4.2.
Status: vulnerable

Paid Membership Subscriptions &#8211; Effortless Memberships, Recurring Payments &amp; Content Restriction, 5708b3793b779fb48cd7f339c6b16ca9bf249c39