Contact Form by WPForms – Drag & Drop Form Builder for WordPress, 008f8eb8-0643-4e59-bd29-acdc1e6f7a06
- CVE, Research URL
- Published on
- -
- Research Description
- WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.4.8.1 Contact Form by WPForms < 1.4.8.1 - Unauthenticated Cross-Site Scripting (XSS) RIPS Technologies identified an Unauthenticated Cross-Site Scripting (XSS) vulnerability within the WPForms WordPress plugin during their WordPress Security Calendar 2018 research. The date parameter was embedded within JavaScript code without any validation or encoding.
- Affected versions
-
max 1.4.8.1.
- Status
-
vulnerable