EXPLOIT/ALERT Back to feed

s2Member vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through 250905.

Published 22 Oct 2025Updated 29 Sep 202674 sources
CVSS 9.0 PoC CANDIDATE
Overview Sources History

What happened

Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through 250905.

Affected versions

s2Member: 0 through 250905 (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

CorrectionsReport an issue