CVE-2021-24648 | BDVDB-2026-168976 Detail

Description#

The RegistrationMagic WordPress plugin before 5.0.1.9 does not sanitise and escape the rm_search_value parameter before outputting back in an attribute, leading to a Reflected Cross-Site Scripting

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://wpscan.com/vulnerability/a3573212-2a98-4504-b8f4-b4d46655e17c
https://plugins.trac.wordpress.org/changeset/2646734

Exploit#

No public exploit known

History#

Version 12022-02-01Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.