CVE-2024-5025

CVE-2024-5025 affects the WordPress plugin Memberpress (vendor: MemberPress) up to version 1.11.29. Root cause: Stored cross-site scripting via the arglist parameter due to insufficient input sanitization and output escaping. Impact: authenticated attackers with Contributor+ access can inject scr...

WordPress Memberpress Plugin <= 1.11.29 is vulnerable to Cross Site Scripting (XSS)

Software Memberpress Type Plugin Vulnerable versions = 1.11.29 Fixed in 1.11.30 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5025 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c5be7fff6c71 Credits stealthcopter Required...