Lucene search
WPScanCVELIST:CVE-2024-6130HistoryJul 01, 2024 - 6:00 a.m.
CVE-2024-6130 Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS
2024-07-0106:00:01
WPScan
www.cve.org
4
cve-2024-6130
form maker
wordpress
stored xss
admin
10web
unfiltered html
settings
0.0004 Low
EPSS
Percentile
9.2%
The Form Maker by 10Web WordPress plugin before 1.15.26 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CNA Affected
[
{
"vendor": "Unknown",
"product": "Form Maker by 10Web ",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "1.15.26"
}
],
"defaultStatus": "unaffected"
}
]Related
cve
cve
CVE-2024-6130
2024-07-01 06:15:23
nvd
nvd
CVE-2024-6130
2024-07-01 06:15:23
vulnrichment
vulnrichment
CVE-2024-6130 Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS
2024-07-01 06:00:01
wordfence
wordfence