CVE-2024-29138: Dev.institute Restrict User Access

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through <= 2.5.

Affected products

• Dev.institute Restrict User Access: up to and including 2.5

Published 2024-03-19. Last modified 2026-06-17.