cleantalk
Vulnerabilities and Security Researches

Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder, e1d3517b-31dc-4ca9-a418-10075e2069a8

Published on
-
Research Description
Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form &amp; Custom Form Builder [formidable] < 2.05.03 Formidable Forms &lt; 2.05.03 - Multiple Vulnerabilities The plugin was affected by Multiple Vulnerabilities: - Unauthenticated preview function allowing shortcodes - SQL injection - Unauthenticated form entries retrieval - Reflected XSS in form preview - Stored XSS in form entries - Server-side code execution via iThemes Sync
Affected versions
max 2.05.03.
Status
vulnerable