Weakness (CWE)
CWE-1078: Inappropriate Source Code Style or Formatting
Class Incomplete Mapping prohibited
The source code does not follow
desired style or formatting for indentation, white
space, comments, etc.
Source: MITRE CWE-1078
1 result · Feed
-
Medium 5.4
Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via Execute
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.15.21. This is due to missing or incorrect nonce validation on the 'execute' fu…