Skip to content
Sign in
8.5 High

CVE-2025-24672 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople Form…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople Form Builder CP cp-easy-form-builder allows SQL Injection.This issue affects Form Builder CP: from n/a through <= 1.2.41.

Affected products and versions

Product Affected versions Fixed in
Form Builder CP 1.2 earliest → 1.2.41 No fix stated

Other CVEs of Form Builder CP

The 2 CVEs of Form Builder CP →
CVE-2024-13680 The Form Builder CP plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the… 6.5 Medium
Track this CVE