PT-2022-14075 · WordPress · Simple Membership

Cydave · Published 2022-06-13 · Updated 2022-06-17 · CVE-2022-1724

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Simple Membership WordPress plugin versions prior to 4.1.1

Description The issue arises from improper sanitization and escaping of parameters in AJAX actions, leading to Reflected Cross-Site Scripting.

Recommendations For versions prior to 4.1.1, update to version 4.1.1 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-1724

Affected Products

Simple Membership

References · 3

• 🔥 https://wpscan.com/vulnerability/96a0a667-9c4b-4ea6-b78a-0681e9a9bbae · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-1724 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1724 · Vendor Advisory