Product
An unauthenticated stored XSS vulnerability in the User Registration & Membership plugin allows attackers to inject arbitrary scripts via the checkbox field due to missing nonce validation.