Skip to content
Sign in
5.4 Medium

CVE-2024-7691 The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow…

Description

The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against administrators.

Affected products and versions

Product Affected versions Fixed in
Flaming Forms 1.0 earliest → 1.0.1 No fix stated
flaming_forms 1.0 earliest → 1.0.1 No fix stated

Other CVEs of Flaming Forms

The 2 CVEs of Flaming Forms →
CVE-2024-7692 The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in… 6.1 Medium
Track this CVE