CVE-2024-43317: WordPress RegistrationMagic plugin <= 6.0.1.0 - Cross Site Scripting (XSS) vulnerability
Published Aug 19, 2024
·Updated
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Metagauss User Registration Team RegistrationMagic allows Cross-Site Scripting (XSS).This issue affects RegistrationMagic: from n/a through 6.0.1.0.
Affected Software
3 affected components
Metagauss Registrationmagic Wordpress<6.0.1.1
Metagauss RegistrationMagic<=6.0.1.0
RegistrationMagic<=6.0.1.0
Remediation
Information
Update to 6.0.1.1 or a higher version.
Event History
Aug 19, 2024
CVE Published
via MITRE·07:22 PM
Data Sourced
via MITRE·07:22 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43317?
CVE-2024-43317 is classified as a high severity Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2024-43317?
To fix CVE-2024-43317, upgrade the RegistrationMagic Plugin to version 6.0.1.1 or later.
3
What versions of RegistrationMagic are affected by CVE-2024-43317?
CVE-2024-43317 affects all versions of RegistrationMagic up to and including 6.0.1.0.
4
Can CVE-2024-43317 lead to unauthorized access?
Yes, CVE-2024-43317 can allow attackers to execute arbitrary scripts in the context of the user’s session.
5
Is CVE-2024-43317 related to web security?
Yes, CVE-2024-43317 is a web security vulnerability specifically related to improper input handling leading to XSS.