CVE-2015-5532

Multiple cross-site scripting XSS vulnerabilities in the Paid Memberships Pro PMPro plugin before 1.8.4.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to membershiplevels.php, 2 memberslist.php, or 3 orders.php in adminpages/ or the 4 edit...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Paid Memberships Pro PMPro plugin before 1.8.4.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to membershiplevels.php, 2 memberslist.php, or 3 orders.php in adminpages/ or the 4 edit...

CVE-2015-5532

CVE-2015-5532 affects the Paid Memberships Pro WordPress plugin. The issue is multiple cross-site scripting (XSS) vulnerabilities in PMPro prior to version 1.8.4.3, exploitable via GET parameters in the WordPress admin pages: s or edit parameters to admin.php (pmpro-membershiplevels, pmpro-member...