CVE-2015-7377 Pie Register – User Registration Forms < 2.0.19 - Reflected Cross-Site Scripting
MediumCVSS 4.3
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the invitaion_code parameter in a pie-register page to the default URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| genetechsolutions pie register | <= 2.0.18 | No fix listed |
| wordpress pie-register(WordPress) | < 2.0.19 | 2.0.19 |
References
- packetstormsecurity.com exploit
- 20151012 CVE-2015-7377: Unauthenticated Reflected XSS in Pie Register WordPress Plugin mailing-list
- github.com
- wpvulndb.com
- Wordfence Intelligence third-party-advisory
- www.cve.org