Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin, a9e0185b022f1f539430e4e3a9e44bd19423e5c8

CVE, Research URL: a9e0185b022f1f539430e4e3a9e44bd19423e5c8
Home page URL: Security reports for Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Application: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Published on: Jun 18, 2015
Research Description: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 1.2.995 WordPress Ultimate Member Plugin <= 1.2.994 - Cross Site Scripting This plugin is prone to a cross site scripting vulnerability, because attackers load data from a location. After that, data from that location is output on the target domain and JavaScript is executed under the context of the current user of the site. Update the plugin.
Affected versions: max 1.2.995.
Status: vulnerable

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &amp; Membership Plugin, a9e0185b022f1f539430e4e3a9e44bd19423e5c8