| Package | Affected versions | Patched versions |
|---|---|---|
| s2member | = 110604= 110605= 110606= 110617= 110620= 110708= 110709= 110710= 110731= 110812= 110815= 110912= 110913= 110915= 110926= 110927= 111002= 111003= 111011= 111017= 111029= 111105= 111206≤ 111216 |
Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free