WordPress Simple Membership <4.1.1 - Cross-Site Scripting
WordPress Simple Membership plugin before 4.1.1 contains a reflected cross-site scripting vulnerability. It does not properly sanitize and escape parameters before outputting them back in AJAX actions.
simple_membershipPoC 已收录
CVSS6.1EPSS 5.2%