High · 7.1 CVE-2024-43220 EUVD-2024-40116GHSA-m5gc-px62-qc98

WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability

Published Aug 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: 10Web Form Builder Team Product: Form Maker by 10Web

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Reflected XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.26.

Affected products

Vendor	Product	Affected	Fixed
10Web Form Builder Team	Form Maker by 10Web	≤ 1.15.26	—

References

https://patchstack.com/database/vulnerability/form-maker/wordpress-form-maker-by-10web-plugin-1-15-26-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry