CVE-2024-5744
PoC —CVSS 3.1
6.8 medium
EPSS
<1%p36
Published
()
Modified
Description
The wp-eMember WordPress plugin before 10.6.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
- Vendors
- tipsandtricks-hq
- Products
- wp emember
- Ecosystems
- WordPress
- Weakness
- CWE-79
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L
In the news0 stories
No ingested article mentions this CVE yet.