5.9 Medium

CVE-2024-56293 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Ahmed…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Ahmed Advanced Form Integration advanced-form-integration allows Stored XSS.This issue affects Advanced Form Integration: from n/a through <= 1.95.0.

Affected products and versions

Product	Affected versions	Fixed in
Advanced Form Integration 1.95	earliest → 1.95.0	No fix stated
Advanced Form Integration 1.95	earliest → 1.95.0	No fix stated

The 2 CVEs of Advanced Form Integration →

CVE-2024-43340 Cross-Site Request Forgery (CSRF) vulnerability in Nasirahmed Advanced Form Integration.This issue affects Advanced Form… 4.3 Medium

Do you use Advanced Form Integration?

Track this CVE Watch Advanced Form Integration Check my SBOMs

www.cveye.io/en/cve/CVE-2024-56293

Timeline

Published January 7, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2024-56293 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Ahmed…

Description

Affected products and versions

Other CVEs of Advanced Form Integration