CVE-2011-5082

The CVE-2011-5082 vulnerability affects the WordPress plugin s2Member Pro (before version 111220). An XSS flaw allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (Coupon Code field). This occurs in the plugin’s checkout handling ...

CVE-2011-5082

Cross-site scripting XSS vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2memberproauthnetcheckoutcoupon parameter aka Coupon Code field...

WordPress s2Member Pro Plugin

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "s2memberproauthnetcheckoutcoupon" parameter. Solution Update the plugin...