Does the XSS Vulnerability affect s2member? | WordPress.org

Sonja London
(@summit)

11 years ago

Does the recent ” XSS Vulnerability Affecting Multiple WordPress Plugins” affect s2member? Has anyone checked the code?

https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html

https://wordpress.org/plugins/s2member/

Viewing 2 replies - 1 through 2 (of 2 total)

Thread Starter Sonja London
(@summit)

11 years ago

I did a quick scan of the code and it does appear that there are some instances of add_query_arg() and remove_query_arg() functions that may be vulnerable.

Plugin Author JasWSInc
(@jaswsinc)

11 years ago

@sonja Thanks for bringing this up.

Please see: http://s2member.com/kb-article/wordpress-v4-1-2-xss-add_query_arg-does-this-impact-s2member-or-s2member-pro/

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Does the XSS Vulnerability affect s2member?’ is closed to new replies.

2 replies
2 participants
Last reply from: JasWSInc
Last activity: 11 years ago
Status: not resolved