Lucene search
WpvulndbWPVDB-ID:FC2EA064-D0C6-4061-8326-F87FE8A3C272HistoryApr 19, 2023 - 12:00 a.m.
ARMember < 4.0.2 - Reflected XSS
2023-04-1900:00:00
wpscan.com
5
armember plugin
version 4.0.2
reflected xss
cross-site scripting
high privilege users
admin
software
0.001 Low
EPSS
Percentile
19.9%
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| armember-membership | lt | 4.0.2 |
Related
cvelist
cvelist
cve
cve
CVE-2022-47140
2023-06-12 13:15:09
nvd
nvd
CVE-2022-47140
2023-06-12 13:15:09
prion
prion
Cross site scripting
2023-06-12 13:15:00
wordfence
wordfence