Unrated severityNVD Advisory· Published Mar 19, 2012· Updated Jun 16, 2026

CVE-2011-5082

Description

Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field).

Affected products

WordPress/S2memberinferred
Range: < 111220
Package: https://wordpress.org/plugins/s2member
WordPress/S2member Prollm-fuzzy
Range: <111220

Patches

Vulnerability mechanics

References

secunia.com/advisories/47954nvdVendor Advisory
www.primothemes.com/forums/viewtopic.phpnvd
www.securityfocus.com/bid/51997nvd
exchange.xforce.ibmcloud.com/vulnerabilities/73202nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000