Pie Register plugin stored XSS flaw
A WordPress sign-up plugin lets attackers plant malicious scripts on visitor pages.
Summary
A input validation flaw in the Pie Register WordPress membership plugin allows stored XSS attacks. Versions 3.8.4.15 and older are affected.
Affected when
- WordPress with Pie Register plugin 3.8.4.15 or older installed
What to do
Update Pie Register to 3.8.4.16 or later.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen