CVE-2021-24239 — Pie Register < 3.7.0.1 - Reflected Cross-Site Scripting (XSS)
The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaion_code GET param…
Published: 2021-04-22 · CVSS: Unscored
The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaion_code GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7