Unscored CVE-2021-24648 EUVD-2021-11560GHSA-f367-vh5r-c4hw

Registration Magic < 5.0.1.9 - Reflected Cross-Site Scripting

Published Feb 1, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The RegistrationMagic WordPress plugin before 5.0.1.9 does not sanitise and escape the rm_search_value parameter before outputting back in an attribute, leading to a Reflected Cross-Site Scripting

References

https://wpscan.com/vulnerability/a3573212-2a98-4504-b8f4-b4d46655e17c
https://plugins.trac.wordpress.org/changeset/2646734