Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder, d011d0f8d6808b6f82f22f4bd751233b76ed4488
- CVE, Research URL
- Home page URL
- Application
- Published on
- Nov 13, 2017
- Research Description
- Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder [formidable] < 2.05.03 Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'after_html' in versions before 2.05.03 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute in a victim's browser.
- Affected versions
-
max 2.05.03.
- Status
-
vulnerable