Lucene search
PRIOn knowledge basePRION:CVE-2023-3182HistoryJul 17, 2023 - 2:15 p.m.
Cross site scripting
2023-07-1714:15:00
PRIOn knowledge base
www.prio-n.com
5
cross site scripting
membership wordpress plugin
reflected
parameter sanitisation
high privilege users
0.001 Low
EPSS
Percentile
21.1%
The Membership WordPress plugin before 3.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| restrict_content | lt | 3.2.3 |
Related
nvd
nvd
CVE-2023-3182
2023-07-17 14:15:10
wpexploit
wpexploit
Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS
2023-06-26 00:00:00
wpvulndb
wpvulndb
Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS
2023-06-26 00:00:00
cve
cve
CVE-2023-3182
2023-07-17 14:15:10
cvelist
cvelist
CVE-2023-3182 Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS
2023-07-17 13:29:56
wordfence
wordfence