← Back to CVE List

CVE-2022-1724

Published: 2022-06-13T13:15Z
Last Modified: 2024-11-21T06:41Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting > MITRE Terms of Use apply – see LICENSE‑MITRE.txt