Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-34437 EUVD-2024-34798GHSA-52wr-qfvp-rcxr

WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability

Published May 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.24.

Affected products

VendorProductAffectedFixed
10Web Form Builder Team Form Maker by 10Web ≤ 1.15.24 —

References