Description (CNA)
The RegistrationMagic WordPress plugin before 5.0.1.9 does not sanitise and escape the rm_search_value parameter before outputting back in an attribute, leading to a Reflected Cross-Site Scripting
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://wpscan.com/vulnerability/a3573212-2a98-4504-b8f4-b4d46655e17c
- https://plugins.trac.wordpress.org/changeset/2646734
ADP enrichment
No English description supplied.