RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login, CVE-2021-24862

CVE, Research URL: CVE-2021-24862
Home page URL: Security reports for RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Application: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Published on: Jan 10, 2022
Research Description: The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue
Affected versions: max 5.0.1.6.
Status: vulnerable

RegistrationMagic &#8211; Custom Registration Forms, User Registration, Payment, and User Login, CVE-2021-24862