Skip to content
Sign in
Not rated

CVE-2021-24505 The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting…

Description

The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the Forms "Add new" field.

Affected products and versions

Product Affected versions Fixed in
Forms 1.12 earliest → < 1.12.3 1.12.3

Other CVEs of Forms

The 2 CVEs of Forms →
CVE-2026-86799 The Forms WordPress plugin before 3.0.2 does not sanitise submitted form values on storage, nor escape them before… 8.8 High
Track this CVE