Lucene search

K
wpexploitIohexWPEX-ID:F1B67F40-642F-451E-A67A-B7487918EE34
HistoryApr 03, 2021 - 12:00 a.m.

Pie Register < 3.7.0.1 - Reflected Cross-Site Scripting (XSS)

2021-04-0300:00:00
iohex
248

The plugin does not sanitise the invitaion_code GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue.

https://example.com/wp-admin/admin.php?page=pr_new_registration_form&show_dash_widget=1&invitaion_code=PHNjcmlwdD5hbGVydCgxKTs8L3NjcmlwdD4=
Related for WPEX-ID:F1B67F40-642F-451E-A67A-B7487918EE34