CVE-2023-3182

33th percentile - higher than 33% of all known CVEs

The Membership plugin for WordPress before version 3.2.3 does not sanitize and escape a parameter before outputting it back on the page, leading to a Reflected Cross-Site Scripting vulnerability. This could be exploited against high privilege users such as administrators.

This vulnerability poses a risk to organizations as it may allow attackers to hijack sessions of high privilege users, potentially leading to unauthorized access to sensitive data.

It is recommended to update the Membership plugin to version 3.2.3 or later to mitigate this vulnerability. Additionally, conducting a security audit of the application to identify other potential weaknesses is advisable.