Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-24979
HistoryDec 27, 2021 - 11:15 a.m.

Cross site scripting

2021-12-2711:15:00
PRIOn knowledge base
www.prio-n.com
3

0.001 Low

EPSS

Percentile

41.5%

The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

CPENameOperatorVersion
paid_memberships_prolt2.6.6

0.001 Low

EPSS

Percentile

41.5%