PT-2025-46567 · WordPress · Team Members Showcase
CVSS v3.1
7.1
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Team Members Showcase WordPress plugin versions prior to 3.5.0
Description
The software does not properly sanitize and escape a parameter before displaying it on a page, creating a reflected cross-site scripting condition. This could potentially be used to compromise users with high privileges, such as administrators.
Recommendations
Update Team Members Showcase WordPress plugin to version 3.5.0 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Team Members Showcase