Skip to content
OpenAdvisories
High · 7.1 CVE-2025-24686 EUVD-2025-3880GHSA-5vw3-ggxc-mhgp

WordPress RegistrationMagic Plugin <= 6.0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Published Jan 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Reflected XSS.This issue affects RegistrationMagic: from n/a through <= 6.0.3.3.

Affected products

VendorProductAffectedFixed
Metagauss RegistrationMagic ≤ 6.0.3.3 —

References