WordSec
WordSec

User Registration <= 1.5.5 - Cross-Site Scripting

2019-01-09 00:00
Mr Winst0n

Strategic Overview

Status
Patched in 1.5.6
Affected PluginUser Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
Affected Version<= 1.5.5
CVSS6.4Medium
CVEN/A
View all User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder vulnerabilities

Vulnerability Overview

The User Registration plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping via the 'edit-registration' parameter. This makes it possible for authenticated attackers to inject arbitrary web scripts that execute in a victim's browser.

Technical Analysis

REMEDIATION: Update to version 1.5.6, or a newer patched version --- IDENTIFIER: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')) The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

External References

https://www.wordfence.com/threat-intel/vulnerabilities/id/761a4801-fc4a-40a0-b5aa-303d88a87062

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C