Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24648

Registration Magic < 5.0.1.9 - Reflected Cross-Site Scripting

Description

The RegistrationMagic WordPress plugin before 5.0.1.9 does not sanitise and escape the rm_search_value parameter before outputting back in an attribute, leading to a Reflected Cross-Site Scripting

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

  • n/aaffected

References