Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Metagauss Subscribe
Filtered by product Leadmagic
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-0232 1 Metagauss 1 Leadmagic 2022-01-24 3.5 LOW 4.8 MEDIUM
The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loader_text parameter found in the ~/includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.2.7. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.