Beveiligingsadvies

CVE-2026-15047

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-10 06:00:19

Laatst bijgewerkt 2026-08-11 15:00:35

Toegewezen door WPScan

CVSS-score 6.8

Status PUBLISHED

Beschrijving

The s2Member WordPress plugin before 260805 does not escape several shortcode attributes before outputting them inside an inline script context, allowing users with contributor-level access to inject arbitrary JavaScript that executes when a viewer opens the post (stored XSS).

← Alle CVE's bekijken Bekijk op cve.org ↗