Threats tagged 'ghsa-vf5v-xr3h-9x33'

The RegistrationMagic WordPress plugin versions prior to 6.1.0.4 contain a vulnerability where user-supplied input is not properly escaped before being included in inline script blocks on several admin screens. This flaw allows unauthenticated attackers to inject arbitrary JavaScript that executes in the context of an administrator's session if the administrator opens a crafted link.