← Database

CVE-2024-4749

HIGH CVSS: 8.3 Published: 2024-06-04 Modified: 2026-06-17

Description

The wp-eMember WordPress plugin before 10.3.9 does not sanitize and escape the "fieldId" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.

Affected Platforms

Tipsandtricks-Hq Wp Emember

Weakness Type

CWE-79

References