CVE-2021-24648

The RegistrationMagic WordPress plugin before 5.0.1.9 does not sanitise and escape the rm_search_value parameter before outputting back in an attribute, leading to a Reflected Cross-Site Scripting

Date published : 2022-02-01

https://plugins.trac.wordpress.org/changeset/2646734

https://wpscan.com/vulnerability/a3573212-2a98-4504-b8f4-b4d46655e17c