Lucene search

PatchstackCVE-2023-45070

HistoryOct 18, 2023 - 1:15 p.m.

CVE-2023-45070

2023-10-1813:15:09

CWE-79

Patchstack

web.nvd.nist.gov

cve-2023-45070

unauthenticated

reflected

cross-site scripting

xss

10web form builder

team form maker

10web

mobile-friendly

drag & drop

contact form builder

nvd

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

AI Score

Confidence

High

EPSS

0.001

Percentile

20.2%

JSON

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18 versions.

Affected configurations

Nvd

Vulners

Node

10webform_makerRange<1.15.19wordpress

VendorProductVersionCPE
10webform_maker*cpe:2.3:a:10web:form_maker:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
10web	form_maker	*	cpe:2.3:a:10web:form_maker::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "https://wordpress.org/plugins/form-maker/",
    "product": "Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder",
    "vendor": "10Web Form Builder Team",
    "versions": [
      {
        "changes": [
          {
            "at": "1.15.19",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.15.18",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/form-maker/wordpress-form-maker-by-10web-mobile-friendly-drag-drop-contact-form-builder-plugin-1-15-18-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve