s2Member vulnerabilities

4 known vulnerabilities in s2Member from Cristián Lávaque. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  s2Member: Deserialization of Untrusted Data

  CVE-2025-58998Nov 6, 2025Cristián Lávaque

  Deserialization of Untrusted Data vulnerability in Cristián Lávaque s2Member s2member allows Object Injection.This issue affects s2Member: from n/a through <= 250701.

• 9.0 Critical severity

  s2Member: Improper Control of Generation of Code

  CVE-2025-62023Oct 22, 2025Cristián Lávaque

  Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through 250905.

• 7.1 High severity

  s2Member: Improper Neutralization of Input During Web Page Generation

  CVE-2025-26879Mar 3, 2025Cristián Lávaque

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristián Lávaque s2Member s2member allows Reflected XSS.This issue affects s2Member: from n/a through <= 241216.

• 9.0 Critical severity

  s2Member: Improper Control of Generation of Code

  CVE-2024-51815Dec 6, 2024Cristián Lávaque

  Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through <= 241114.