Cross site scripting

2023-12-1909:15:00

PRIOn knowledge base

www.prio-n.com

improper neutralization input

web page generation

reflected xss

simple membership

nvd

7.1 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in smp7, wp.Insider Simple Membership allows Reflected XSS.This issue affects Simple Membership: from n/a through 4.3.8.

CPENameOperatorVersion
simple_membershiple4.3.8

CPE	Name	Operator	Version
	simple_membership	le	4.3.8

References

patchstack.com/database/vulnerability/simple-membership/wordpress-simple-membership-plugin-4-3-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve