Lucene search

K
wpvulndbWpvulndbWPVDB-ID:C632F176-0816-448C-B570-6216C3D52017
HistorySep 08, 2021 - 12:00 a.m.

Konnichiwa! Membership <= 0.8.3 - Reflected Cross-Site Scripting

2021-09-0800:00:00
wpscan.com
12
membership
reflected cross-site scripting
web scripts
vulnerability

EPSS

0.001

Percentile

32.7%

The plugin is vulnerable to Reflected Cross-Site Scripting via the plan_id parameter in the ~/views/subscriptions.html.php file which allows attackers to inject arbitrary web scripts.

EPSS

0.001

Percentile

32.7%

Related for WPVDB-ID:C632F176-0816-448C-B570-6216C3D52017