CVE-2021-24513

MEDIUM

5.4

CVSS Severity Score

EPSS Score0.0460%

EPSS Percentile0.49th

Published2021年9月6日

Last Modified2024年11月21日

Vulnerability Description

The Form Builder | Create Responsive Contact Forms WordPress plugin before 1.9.8.4 does not sanitise or escape its Form Title, allowing high privilege users such as admin to set Cross-Site Scripting payload in them, even when the unfiltered_html capability is disallowed

Affected Platforms (CPE)

📦

Web Settler

Form Builder

< 1.9.8.4

References & Advisories

🔗 https://wpscan.com/vulnerability/a1dc0ea9-51dd-43c3-bfd9-c5106193aeb6

Vulnerability Description

Affected Platforms (CPE)

Form Builder

References & Advisories

相关漏洞威胁