cleantalk
Vulnerabilities and Security Researches

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login, 9428bb45-1b95-4d10-9870-f232cbf89000

Published on
-
Research Description
RegistrationMagic &#8211; Custom Registration Forms, User Registration, Payment, and User Login [custom-registration-form-builder-with-submission-manager] < 5.0.1.9 Registration Magic &lt; 5.0.1.9 - Reflected Cross-Site Scripting The plugin does not properly sanitise and escape an arbitrary GET parameter before outputting back in an attribute when generating the Log pagination, leading to a Reflected Cross-Site Scripting
Affected versions
max 5.0.1.9.
Status
vulnerable