Medium · 5.8 CVE-2024-39643 EUVD-2024-38148GHSA-f97v-4q2m-vp42

WordPress RegistrationMagic plugin <= 6.0.0.1 - Cross Site Scripting (XSS) vulnerability

Published Aug 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: RegistrationMagic Forms Product: RegistrationMagic

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RegistrationMagic Forms RegistrationMagic allows Stored XSS.This issue affects RegistrationMagic: from n/a through 6.0.0.1.

Affected products

Vendor	Product	Affected	Fixed
RegistrationMagic Forms	RegistrationMagic	≤ 6.0.0.1	—

References

https://patchstack.com/database/vulnerability/custom-registration-form-builder-with-submission-manager/wordpress-registrationmagic-custom-registration-forms-user-registration-payment-and-user-login-plugin-6-0-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry