CVE-2023-23989: WordPress RegistrationMagic plugin <= 5.1.9.2 - Content Injection
Published Apr 24, 2024
·Updated
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Code Injection.This issue affects RegistrationMagic: from n/a through <= 5.1.9.2.
Affected Software
3 affected components
Metagauss Registrationmagic Wordpress<5.1.9.3
Metagauss RegistrationMagic<=5.1.9.2
RegistrationMagic<=5.1.9.2
Remediation
Information
Update to 5.1.9.3 or a higher version.
Event History
Apr 24, 2024
CVE Published
via MITRE·02:41 PM
Data Sourced
via MITRE·02:41 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-23989?
CVE-2023-23989 has been categorized as a medium severity vulnerability.
2
How do I fix CVE-2023-23989?
To fix CVE-2023-23989, update Metagauss RegistrationMagic to version 5.1.9.3 or later.
3
Which versions are affected by CVE-2023-23989?
CVE-2023-23989 affects Metagauss RegistrationMagic versions from n/a through 5.1.9.2.
4
What type of vulnerability is CVE-2023-23989?
CVE-2023-23989 is a Cross-Site Scripting (XSS) vulnerability due to improper neutralization of user input.
5
Is CVE-2023-23989 exploitable?
Yes, CVE-2023-23989 can be exploited to inject malicious scripts into web applications that use the affected versions.