CVE-2018-0585

Publication date

2018-05-14 13:00:00

Family

jpcert

State

PUBLISHED

Description

Cross-site scripting vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.