Description
WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Syed Balkhi | WPForms | ≤ 1.7.8 | — |
References
- ExploitDB-51152 exploit
- WPForms Lite Plugin Homepage product
- VulnCheck Advisory: WPForms 1.7.8 - Cross-Site Scripting (XSS) third-party-advisory