Unscored CVE-2017-2222 EUVD-2017-11405GHSA-w9j5-8jq7-wvp8

Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via …

Published Jul 7, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Chad Butler	WP-Members	prior to version 3.1.8	—

References

https://wordpress.org/plugins/wp-members/#developers
JVN#51355647 third-party-advisory
https://plugins.trac.wordpress.org/changeset/1667369/#file12