Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder, CVE-2022-3300

CVE, Research URL: CVE-2022-3300
Home page URL: Security reports for Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Application: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Published on: Oct 25, 2022
Research Description: The Form Maker by 10Web WordPress plugin before 1.15.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Affected versions: Min -, max 1.15.20.
Status: vulnerable

Form Maker by 10Web &#8211; Mobile-Friendly Drag &amp; Drop Contact Form Builder, CVE-2022-3300