Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in nCrafts FormCraft plugin <= 1.2.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nCrafts | FormCraft | ≤ 1.2.6 | — |
Medium · 6.5
CVE-2023-22717
EUVD-2023-26846GHSA-4p4x-664v-56jg
WordPress FormCraft Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)
Published May 15, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack