Lucene search
MgthuramoemyintWPVDB-ID:1806FEF3-D774-46E0-AA48-7A101495F4EBHistoryMay 22, 2024 - 12:00 a.m.
Arforms < 6.4.1 - Reflected XSS
2024-05-2200:00:00
mgthuramoemyint
wpscan.com
1
arforms
plugin
xss
user input
ajax actions
Description The plugin does not properly escape user-controlled input when it is reflected in some of its AJAX actions.
PoC
https://www.example.com/wp-admin/admin-ajax.php?action=current_modal&position;_modal=
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 6.4.1 |
Related
nvd
nvd
CVE-2024-0427
2024-06-12 06:15:08
cvelist
cvelist
CVE-2024-0427 Arforms < 6.4.1 - Reflected XSS
2024-06-12 06:00:02
cve
cve
CVE-2024-0427
2024-06-12 06:15:08
wpexploit
wpexploit
Arforms < 6.4.1 - Reflected XSS
2024-05-22 00:00:00
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.2%
Related for WPVDB-ID:1806FEF3-D774-46E0-AA48-7A101495F4EB