high8.3
CVE-2024-4749
The wp-eMember WordPress plugin before 10.3.9 does not sanitize and escape the "fieldId" parameter before outputting it back in the page, leading to a Reflecte…
Impact
The wp-eMember WordPress plugin before 10.3.9 does not sanitize and escape the "fieldId" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tipsandtricks-Hq | Wp Emember | before 10.3.9 |