The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 20 May 2025 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Tipsandtricks-hq
Tipsandtricks-hq wp Emember
Weaknesses CWE-79
CPEs cpe:2.3:a:tipsandtricks-hq:wp_emember:*:*:*:*:*:wordpress:*:*
Vendors & Products Tipsandtricks-hq
Tipsandtricks-hq wp Emember

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published:

Updated: 2024-08-01T21:18:06.857Z

Reserved: 2024-06-06T19:59:33.012Z

Link: CVE-2024-5715

cve-icon Vulnrichment

Updated: 2024-08-01T21:18:06.857Z

cve-icon NVD

Status : Analyzed

Published: 2024-07-13T06:15:05.393

Modified: 2025-05-20T18:19:24.600

Link: CVE-2024-5715

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.