CVE-2021-24608 Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting

2021-10-2513:20:45

CWE-79

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

21.6%

JSON

The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress plugin before 5.0.07 does not sanitise and escape its Form’s Labels, allowing high privileged users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

CNA Affected

[
  {
    "product": "Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "5.0.07",
        "status": "affected",
        "version": "5.0.07",
        "versionType": "custom"
      }
    ]
  }
]