NuytsTech Security

CVE-2018-10234

by ·

Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input field on the wp-admin/admin.php?page=um_options&section=account page.

Date published : 2018-04-23

https://github.com/RiieCco/write-ups/tree/master/CVE-2018-10234

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

Tags: