Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin s2Member Pro Coupon Code Field HTML Injection - CVE-2011-5082 - Vulnerability Database
WP Plugin S2Member

WordPress Plugin s2Member Pro Coupon Code Field HTML Injection - CVE-2011-5082

Medium
Reference: CVE-2011-5082
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-5082
Title: WordPress Plugin s2Member Pro Coupon Code Field HTML Injection
Overview:

WordPress Plugin s2Member Pro is prone to an HTML injection vulnerability because it fails to properly sanitize user-supplied input. Attacker supplied HTML and script code would run in the context of the affected browser potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user other attacks are also possible. WordPress Plugin s2Member Pro version 111216 is vulnerable prior versions may also be affected.