← Database

CVE-2022-1724

MEDIUM CVSS: 6.1 Published: 2022-06-13 Modified: 2026-06-17

Description

The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting

Affected Platforms

Simple-Membership-Plugin Simple Membership

Weakness Type

CWE-79

References