CVE-2024-5715: WP eMember < 10.6.7 - Reflected XSS via Member Edit
Published Jul 13, 2024
·Updated
The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected Software
2 affected components
WordPress wp-eMember<10.6.7
Tipsandtricks-hq Wp Emember Wordpress<10.6.7
Event History
Jul 13, 2024
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-5715?
The severity of CVE-2024-5715 is critical due to its potential impact on high privilege users.
2
How do I fix CVE-2024-5715?
To fix CVE-2024-5715, update the wp-eMember WordPress plugin to version 10.6.7 or later.
3
Which versions of wp-eMember are affected by CVE-2024-5715?
versions of wp-eMember prior to 10.6.7 are affected by CVE-2024-5715.
4
What type of vulnerability is CVE-2024-5715?
CVE-2024-5715 is a Reflected Cross-Site Scripting vulnerability.
5
Who is primarily affected by CVE-2024-5715?
CVE-2024-5715 primarily affects high privilege users, such as administrators.