Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, when "Allow New Registrations to set their own Password" is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) pass1 or (2) pass2 parameter in a register action. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress Pie Register插件‘wp-login.php’多个跨站脚本漏洞
Vulnerability Description
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台，该平台支持在PHP和MySQL的服务器上架设个人博客网站。Pie-Register是其中的一个强化注册页面插件。 WordPress平台下的Genetech Solutions Pie-Register插件1.30及之前的版本中的wp-login.php文件中存在多个跨站脚本漏洞。在启用“允许新注册用户修改自己的密码”的条件下，远程攻击者可通过注册操作中的pass1或pass2参数利用该漏洞注入任意Web脚本或HTML代码
CVSS Information
N/A
Vulnerability Type
N/A