5.4
Moyenne
CVE-2024-7691 The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow…
Description
The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against administrators.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Flaming Forms 1.0 | premières → 1.0.1 | Pas de correctif indiqué |
| flaming_forms 1.0 | premières → 1.0.1 | Pas de correctif indiqué |