Not rated

CVE-2021-25107 The Form Store to DB WordPress plugin before 1.1.1 does not sanitise and escape parameter keys before outputting it back…

Description

The Form Store to DB WordPress plugin before 1.1.1 does not sanitise and escape parameter keys before outputting it back in the created entry, allowing unauthenticated attacker to perform Cross-Site Scripting attacks against admin

Affected products and versions

Product	Affected versions	Fixed in
Form Store to DB 1.1	earliest → < 1.1.1	1.1.1

Do you use Form Store to DB?

Track this CVE Watch Form Store to DB Check my SBOMs

www.cveye.io/en/cve/CVE-2021-25107

Timeline

Published February 14, 2022
Last modified August 3, 2024

References

wpscan.com wpscan.com
plugins.trac.wordpress.org plugins.trac.wordpress.org

Track this CVE