Lucene search
KauenavarroWPVDB-ID:6CC05A33-6592-4D35-8E66-9B6A9884DF7EHistoryMay 14, 2024 - 12:00 a.m.
WP eMember < 10.3.9 - Reflected XSS
2024-05-1400:00:00
kauenavarro
wpscan.com
2
wordpress
emember
plugin
xss
security
vulnerability
Description The plugin does not sanitize and escape the “fieldId” parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.
PoC
https://www.example.com/wp-admin/admin-ajax.php?fieldId=&action;=check_name
Related
wpexploit
wpexploit
WP eMember < 10.3.9 - Reflected XSS
2024-05-14 00:00:00
wpvulndb
wpvulndb
WP eMember < 10.3.9 - Reflected Cross-Site Scripting
2024-05-31 00:00:00
cvelist
cvelist
CVE-2024-4749 WP eMember < 10.3.9 - Reflected XSS
2024-06-04 06:00:02
cve
cve
CVE-2024-4749
2024-06-04 06:15:11
nvd
nvd
CVE-2024-4749
2024-06-04 06:15:11
vulnrichment
vulnrichment
CVE-2024-4749 WP eMember < 10.3.9 - Reflected XSS
2024-06-04 06:00:02
wordfence
wordfence
AI Score
9.2
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:6CC05A33-6592-4D35-8E66-9B6A9884DF7E