Vulnerabilities and Security Researches

Simple Membership, CVE-2022-1724

CVE, Research URL: CVE-2022-1724
Home page URL: Security reports for Simple Membership
Application: Simple Membership
Published on: Jun 13, 2022
Research Description: The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting
Affected versions: max 4.1.1.
Status: vulnerable