CVE Database /
CVE-2023-50376
CVE · High
CVE-2023-50376 — Simple Membership [simple-membership] < 4.3.9
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-50376
|
Simple Membership [simple-membership] < 4.3.9 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
High
7.1
|
< 4.3.9
|
4.3.9 |
2023-12-19 |
—
|
CVE-2023-50376
A stored cross-site scripting (XSS) vulnerability was discovered in the Simple Membership plugin before version 4.3.9 that could allow attackers to inject malicious scripts into the website, potentially delivering redirects, advertisements, or other HTML content that executes for site visitors. The flaw was identified by Le Ngoc Anh and has been resolved in version 4.3.9 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings