WP-Members Membership Plugin, 8fa7026d8724f0e4f2042248f4d9e27dc71db286

CVE, Research URL: 8fa7026d8724f0e4f2042248f4d9e27dc71db286
Home page URL: Security reports for WP-Members Membership Plugin
Application: WP-Members Membership Plugin
Published on: Jan 07, 2014
Research Description: WP-Members Membership Plugin [wp-members] < 2.8.10 WP-Members Membership Plugin <= 2.8.9 - Reflected Cross-Site Scripting The WP Members plugin for WordPress is vulnerable to Multiple Cross-Site Scripting via several parameters in versions before 2.8.10 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
Affected versions: max 2.8.10.
Status: vulnerable