Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-27995 EUVD-2024-25169GHSA-329g-rg28-m8qv

WordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerability

Published Mar 21, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup allows Stored XSS.This issue affects ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup: from n/a through 4.0.23.

Affected products

VendorProductAffectedFixed
Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup ≤ 4.0.23 —

References