s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscription, CVE-2011-5082

CVE, Research URL: CVE-2011-5082
Home page URL: Security reports for s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscription
Application: s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscription
Published on: Mar 20, 2012
Research Description: Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field).
Affected versions: Min -, max 111220.
Status: vulnerable

s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls &amp; Member Access Subscription, CVE-2011-5082