CVE-2011-5082

Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field).
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:s2member:s2member:111011:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:111003:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110815:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110812:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110606:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110605:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110604:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:111029:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:111017:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110913:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110912:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110710:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110620:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:111206:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110915:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110709:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:*:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110927:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110708:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:111002:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110926:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:111105:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110617:*:*:*:*:*:*:*
cpe:2.3:a:s2member:s2member:110731:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Information

Published : 2012-03-19 11:55

Updated : 2017-08-28 18:30


NVD link : CVE-2011-5082

Mitre link : CVE-2011-5082


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

s2member

  • s2member

wordpress

  • wordpress