Skip to content
OpenAdvisories
High · 7.1 CVE-2023-45071 EUVD-2023-49392GHSA-9vf3-vw7m-x4rr

WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

Published Oct 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: 10Web Form Builder Team Product: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

Description

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18 versions.

Affected products

VendorProductAffectedFixed
10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder ≤ 1.15.18 —

References