MemberSpace WordPress Plugin Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the MemberSpace WordPress plugin, affecting versions prior to 2.1.14. The issue arises because the plugin fails to properly sanitize and escape a parameter before displaying it on the page, potentially allowing malicious scripts to be executed by unauthenticated users.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.