Skip to content
Sign in
Not rated

CVE-2023-3134 The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form…

Description

The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks.

Affected products and versions

Product Affected versions Fixed in
Forminator 1.24 earliest → < 1.24.4 1.24.4

Other CVEs of Forminator

The 3 CVEs of Forminator →
CVE-2023-5119 The Forminator WordPress plugin before 1.27.0 does not properly sanitize the redirect-url field in the form submission… Not rated CVE-2023-2010 The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already… Not rated
Track this CVE