CVE-2011-5082

Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML…

published March 19, 2012

CVSS
—
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01937 · 79.8th percentile
Published
2012-03-19T18:00Z
EPSS history
Timeline
  • 19 MAR 18:00Z
    Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML…
    cvelistv5