User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin, a3e39175d7e739be900c3f20b1e1c714c718873a
- CVE, Research URL
- Home page URL
- Application
-
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin
- Published on
- Jan 09, 2019
- Research Description
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder [user-registration] < 1.5.6 User Registration <= 1.5.5 - Cross-Site Scripting The User Registration plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping via the 'edit-registration' parameter. This makes it possible for authenticated attackers to inject arbitrary web scripts that execute in a victim's browser.
- Affected versions
-
max 1.5.6.
- Status
-
vulnerable