Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder, 6b9c025cb77a1b33c493aba3957721459808ba59
- CVE, Research URL
- Home page URL
- Application
- Published on
- Nov 13, 2017
- Research Description
- Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder [formidable] < 2.05.03 Formidable Form Builder < 2.05.03 - Reflected Cross-Site Scripting The Formidable Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'before_html' parameter passed through the frm_forms_preview AJAX action in versions before 2.05.03 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser whenever they successfully trick a victim into performing an action like clicking on a link.
- Affected versions
-
max 2.05.03.
- Status
-
vulnerable