CVE-2021-24239 Pie Register < 3.7.0.1 - Reflected Cross-Site Scripting (XSS)

2021-04-2221:00:51

CWE-79

WPScan

www.cve.org

pie register

wordpress plugin

xss

EPSS

0.002

Percentile

53.1%

JSON

The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaion_code GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue.

CNA Affected

[
  {
    "product": "Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.7.0.1",
        "status": "affected",
        "version": "3.7.0.1",
        "versionType": "custom"
      }
    ]
  }
]