MEDIUM
WordPress RegistrationMagic plugin <= 6.0.0.1 - Cross Site Scripting (XSS) vulnerability
Published Aug 1, 2024
6.1
MEDIUMCVSS 3.1
EPSS 0.27%
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RegistrationMagic Forms RegistrationMagic allows Stored XSS.This issue affects RegistrationMagic: from n/a through 6.0.0.1.
Affected products
-
Affected
- ≤ 6.0.0.1
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| RegistrationMagic Forms | RegistrationMagic | unaffected | Affected
|
- < 6.0.0.2
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Update to 6.0.0.2 or a higher version.
Weaknesses (1)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-38148 Advisory
- https://patchstack.com/database/vulnerability/custom-registration-form-builder-with-submission-manager/wordpress-registrationmagic-custom-registration-forms-user-registration-payment-and-user-login-plugin-6-0-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entryThird Party Advisory
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Patchstack
Published Aug 1, 2024
Updated Apr 28, 2026
Reserved Jun 26, 2024
Link CVE-2024-39643
CISA Vulnrichment
Updated Aug 2, 2024
Red Hat
No data
GitHub
No data