Aller au contenu
Se connecter
Non notée

CVE-2023-3134 The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form…

Description

The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks.

Produits et versions touchés

Produit Versions touchées Corrigé en
Forminator 1.24 premières → < 1.24.4 1.24.4

Autres CVE de Forminator

Les 3 CVE de Forminator →
CVE-2023-5119 The Forminator WordPress plugin before 1.27.0 does not properly sanitize the redirect-url field in the form submission… Non notée CVE-2023-2010 The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already… Non notée
Suivre cette CVE