CyberRota Analysis
AI-GeneratedThe RegistrationMagic plugin for WordPress prior to version 6.0.9.9 is vulnerable due to improper escaping of registration form field values, which can lead to Stored Cross-Site Scripting (XSS) attacks. This vulnerability allows unauthenticated users to inject malicious scripts that execute in the context of high-privilege users, such as administrators, potentially compromising site security. WordPress site administrators and security teams should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting it in an HTML attribute on an administrative page, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against high privilege users such as admin.