Unscored CVE-2018-0585 EUVD-2018-1395GHSA-42x4-79w3-22pp

Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to inject arbitra…

Published May 14, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Ultimate Member Product: Ultimate Member

Description

Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Ultimate Member	Ultimate Member	prior to version 2.0.4	—

References

JVN#28804532 third-party-advisory
https://wordpress.org/plugins/ultimate-member/#developers
https://wpvulndb.com/vulnerabilities/9608