CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2018-17866 | Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.0.28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.0.28 | 2.0.28 | 2018-10-06 | — |
The Ultimate Member plugin before version 2.0.28 contained multiple reflected cross-site scripting flaws in its login action handler that allowed attackers to execute arbitrary JavaScript or HTML code by injecting malicious input through the "Primary button Text" and "Second button text" configuration fields.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.