Threats tagged 'ghsa-7g36-jx9h-h5j4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS 0.4%	CVE-2026-15047s2Member (WordPress plugin) · Cross-Site Scripting (XSS) Medium6.8EPSS 0.4%2026-08-10CVE Database V5CVE-2026-15047 The s2Member WordPress plugin before 260805 does not escape several shortcode attributes before outputting them inside an inline script context, allowing users with contributor-level access to inject arbitrary JavaScript that executes when a viewer opens the post (stored XSS). EPSS 0.4%Vulnerability CWE-79 #ghsa-7g36-jx9h-h5j4	CVE Database V5	2026-08-10

Page 1 of 1