← back
CVE-2021-24648

Registration Magic < 5.0.1.9 - Reflected Cross-Site Scripting

EPSS 0.9%
The RegistrationMagic WordPress plugin before 5.0.1.9 does not sanitise and escape the rm_search_value parameter before outputting back in an attribute, leading to a Reflected Cross-Site Scripting
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →