4 matches found
PT-2021-15782
Name of the Vulnerable Software and Affected Versions The Pie Register – User Registration Forms plugin versions prior to 3.7.0.1 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the invitaion code GET parameter is not properly sanitized when it is...
Cross site scripting
Cross-site scripting XSS vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the invitaioncode parameter in a pie-register page to the default URI...
PT-2015-7539
Name of the Vulnerable Software and Affected Versions Pie Register plugin versions prior to 2.0.19 Description The issue allows remote attackers to inject arbitrary web script or HTML via the invitaion code parameter in a "pie-register" page. This is a cross-site scripting XSS issue, which occurs...
PT-2015-7576
Name of the Vulnerable Software and Affected Versions Pie Register plugin versions prior to 2.0.19 Description The issue allows remote administrators to execute arbitrary SQL commands. This can be achieved via the select invitaion code bulk option or invi del id parameter in the...