medium6.1
CVE-2022-1724
The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Re…
Impact
The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simple-Membership-Plugin | Simple Membership | before 4.1.1 |