Skip to content
OpenAdvisories
Medium · 4.7 CVE-2022-38971 EUVD-2022-41518GHSA-4mx2-p3fc-wx76

WordPress BuddyForms Plugin <= 2.7.5 is vulnerable to Cross Site Scripting (XSS)

Published Mar 16, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Themekraft Product: Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions

Description

Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin <= 2.7.5 versions.

Affected products

VendorProductAffectedFixed
ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions ≤ 2.7.5 —

References