CVE-2025-26874

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in memberspace MemberSpace memberspace allows Reflected XSS.This issue affects MemberSpace: from n/a through = 2.1.13...

CVE-2025-26874

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in memberspace MemberSpace memberspace allows Reflected XSS.This issue affects MemberSpace: from n/a through = 2.1.13...

CVE-2025-26874

CVE-2025-26874 affects WordPress: MemberSpace plugin (versions up to 2.1.13). Root cause is improper input neutralization during web page generation, enabling Reflected XSS. CVSSv3.1 base score 7.1 (HIGH); attack vector NETWORK, privileges NONE, user interaction REQUIRED, scope CHANGED. Connected...