Lucene search
WpvulndbWPVDB-ID:AC673F9B-F1F1-4FDC-BAFD-CF2E9A5856C6HistorySep 23, 2023 - 12:00 a.m.
Contact Form by FormGet <= 5.5.5 - Contributor+ Stored XSS
2023-09-2300:00:00
wpscan.com
4
plugin
stored xss
contact form
formget 5.5.5
contributor
validation
escape
shortcode
attributes
page
high privilege users
admin
Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin
Related
cvelist
cvelist
CVE-2023-5125
2023-09-23 04:29:41
prion
prion
Cross site scripting
2023-09-23 05:15:00
cve
cve
CVE-2023-5125
2023-09-23 05:15:31
nvd
nvd
CVE-2023-5125
2023-09-23 05:15:31
wordfence
wordfence
AI Score
6
Confidence
High
EPSS
0.001
Percentile
21.7%
Related for WPVDB-ID:AC673F9B-F1F1-4FDC-BAFD-CF2E9A5856C6