CVE-2024-5079
EUVD-2024-4633813.07.2024, 06:15
The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape some of the fields when members register, which allows unauthenticated users to perform Stored Cross-Site Scripting attacks
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| tipsandtricks-hq | wp_emember | 𝑥 < 10.6.7 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| wpemember | wpemember | 𝑥 < 10.6.7 | ADP |