CVE-2024-33947: WordPress RegistrationMagic plugin <= 5.3.2.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss RegistrationMagic allows Reflected XSS.This issue affects RegistrationMagic: from n/a through 5.3.2.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33947?
CVE-2024-33947 is classified as a medium severity vulnerability due to its potential to allow reflected cross-site scripting (XSS).
How do I fix CVE-2024-33947?
To fix CVE-2024-33947, upgrade Metagauss RegistrationMagic to version 5.3.2.1 or later, as this version addresses the vulnerability.
What types of attacks can CVE-2024-33947 facilitate?
CVE-2024-33947 can facilitate reflected XSS attacks, which may lead to session hijacking or data manipulation.
Which versions of RegistrationMagic are affected by CVE-2024-33947?
CVE-2024-33947 affects versions of RegistrationMagic from n/a up to and including 5.3.2.0.
Is CVE-2024-33947 specific to certain platforms?
CVE-2024-33947 specifically impacts the Metagauss RegistrationMagic plugin utilized on WordPress.