cve/2021/CVE-2021-24648.md
2025-09-29 21:09:30 +02:00

711 B

CVE-2021-24648

Description

The RegistrationMagic WordPress plugin before 5.0.1.9 does not sanitise and escape the rm_search_value parameter before outputting back in an attribute, leading to a Reflected Cross-Site Scripting

POC

Reference

Github