|
|
Register Plus Multiple HTML Injection Vulnerabilities
The Register Plus plugin for WordPress is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code could be executed in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks may also be possible. Register plus versions 3.5.1 and prior are vulnerable. |
|
Privacy Statement |