GCVE - cpe:2.3:a:user_registration,_login_&_landing_pages_–_leadmagic:user_registration,_login_&_landing_pages_–

Approved changes feed: RSS · Atom

cpe:2.3:a:user_registration,_login_&_landing_pages_–_leadmagic:user_registration,_login_&_landing_pages_–_leadmagic:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	User Registration, Login & Landing Pages – Leadmagic (`87cd9b04-8eed-54c1-8336-8d60cce78d20`)
Product	User Registration, Login & Landing Pages – Leadmagic (`ab317b8b-415f-5c60-af26-9b2e2444b700`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-0232`	vulnerable	2026-06-08 05:39:09.575461	User Registration, Login & Landing Pages – LeadMagic <= 1.2.7 Admin+ Stored Cross-Site Scripting MEDIUM (4.8) The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loader_text parameter found in the ~/includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.2.7. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled. Published: 2022-01-18T16:52:25.000Z Updated: 2025-01-31T18:55:33.845Z Open on db.gcve.eu Reference links https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0232 https://github.com/BigTiger2020/2022/blob/main/User%20Registration%20Xss.md https://plugins.trac.wordpress.org/browser/custom-landing-pages-leadmagic/tags/1.2.6/includes/templates/landing-page.php#L35	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.