CVE-2022-47421: WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)
Published Jul 18, 2023
·Updated
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute InfoSystems ARMember (premium) plugins.
Affected Software
2 affected components
Armemberplugin Armember Wordpress<4.0.5
Armemberplugin Armember Wordpress<=5.8
Remediation
Information
Update the ARMember (free) to 4.0.5 or a higher version.
Event History
Jul 18, 2023
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
RemedyDescriptionSeverityWeakness
Data Sourced
03:15 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-47421?
The severity of CVE-2022-47421 is medium (4.8).
2
What is the vulnerability in Repute InfoSystems ARMember plugin?
The vulnerability in Repute InfoSystems ARMember plugin is a stored Cross-Site Scripting (XSS) vulnerability.
3
Which versions of Repute InfoSystems ARMember plugin are affected?
Versions up to but excluding 4.0.5 of the free plugin, and versions up to and including 5.8 of the premium plugin are affected.
4
How can the stored Cross-Site Scripting (XSS) vulnerability be exploited?
The stored Cross-Site Scripting (XSS) vulnerability can be exploited by an authenticated administrator or higher user.
5
How can I fix the stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin?
To fix the stored Cross-Site Scripting (XSS) vulnerability, update the plugin to version 4.0.5 for the free plugin or version 5.8 for the premium plugin.