What’s Vulnerable › Vulnerabilities

CVE-2020-8436

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-03-12 · updated 2026-06-17
• Weakness: CWE-79

Description

XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name parameter.

Affected products

• Metagauss RegistrationMagic: 4.6.0.0

References

• https://Spider-security.co.uk
• https://spider-security.co.uk/blog-cve-2020-8436
• https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers
• https://Spider-security.co.uk
• https://spider-security.co.uk/blog-cve-2020-8436
• https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers

Get alerted when CVE-2020-8436 or the next vulnerability affects your stack