CVE-2024-13727

MEDIO 6.1CVE-2024-13727 · Published 15/05/2025 · updated 17/06/2026

In breve

CVE-2024-13727 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda memberspace (memberspace).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.63%, superiore al 50.3% delle vulnerabilità.
Correzione: aggiornare a 2.1.14 o successiva.

Package	Affected versions	Patched versions
memberspace memberspace	`< 2.1.14`	`2.1.14`

Description

The MemberSpace WordPress plugin before 2.1.14 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users.

References

wpscan.com/vulnerability/598d20f2-0f42-48f2-a941-0d6c5da5303e · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free