CVE-2018-6943

Published: 2018-02-16T14:29Z

Last Modified: 2024-11-21T04:11Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

core/lib/upload/um-image-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitize user input passed to the $temp variable. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt