High severity8.3NVD Advisory· Published Jun 4, 2024· Updated Jun 17, 2026
CVE-2024-4749
CVE-2024-4749
Description
The wp-eMember WordPress plugin before 10.3.9 does not sanitize and escape the "fieldId" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- WordPress/wp-eMemberdescription
<10.3.9+ 1 more
- (no CPE)range: <10.3.9
- (no CPE)
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/6cc05a33-6592-4d35-8e66-9b6a9884df7e/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.