CVE-2024-5744
EUVD-2024-4690113.07.2024, 06:15
The wp-eMember WordPress plugin before 10.6.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| tipsandtricks-hq | wp_emember | 𝑥 < 10.6.7 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| tips_and_tricks_hq | wp_emember | 𝑥 < 10.6.7 | ADP |