5.1
Medium
CVE-2020-36919 WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter
Description
WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WPForms 1.7 | earliest → 1.7.8 | No fix stated |