Lucene search
Asif Nawaz MinhasWPEX-ID:75305EA8-730B-4CAF-A3C6-CB94ADEE683CHistoryOct 06, 2021 - 12:00 a.m.
Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting
2021-10-0600:00:00
Asif Nawaz Minhas
141
formidable form builder
cross-site scripting
admin+
stored exploit
EPSS
0.001
Percentile
21.4%
The plugin does not sanitise and escape its Form’s Labels, allowing high privileged users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Create/edit a form, add the following payload to a Field Label: <script>alert(/XSS/)</script>
The XSS will be triggered when viewing/previewing the FormRelated
prion
prion
Cross site scripting
2021-10-25 14:15:00
cve
cve
CVE-2021-24608
2021-10-25 14:15:10
CVE-2021-39330
2021-10-14 16:15:09
nvd
nvd
CVE-2021-24608
2021-10-25 14:15:10
CVE-2021-39330
2021-10-14 16:15:09
wpvulndb
wpvulndb
Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting
2021-10-06 00:00:00
cvelist
cvelist
openvas
openvas
WordPress Formidable Forms Builder Plugin < 5.0.07 Multiple Vulnerabilities
2021-11-03 00:00:00