Skip to content
OpenAdvisories
Unscored CVE-2021-24505 EUVD-2021-11417GHSA-chv5-257q-w5jx

Forms < 1.12.3 - Authenticated Stored Cross-Site Scripting (XSS)

Published Aug 9, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the Forms "Add new" field.

Affected products

VendorProductAffectedFixed
— Forms 1.12.3 – < 1.12.3 1.12.3

References