Vulnerabilities > Usersultra > Users Ultra Membership > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-09-20 CVE-2015-9393 Cross-site Scripting vulnerability in Usersultra Users Ultra Membership 1.5.59
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.
network
low complexity
usersultra CWE-79
5.4
2019-09-20 CVE-2015-9392 Cross-site Scripting vulnerability in Usersultra Users Ultra Membership 1.5.59
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.
network
low complexity
usersultra CWE-79
5.4