Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 04/03/2019 Updated: 18/05/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

The "Forminator Contact Form, Poll & Quiz Builder" plugin prior to 1.6 for WordPress has XSS via a custom input field of a poll.

Vulnerable Product	Search on Vulmon	Subscribe to Product
incsub forminator

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Tue, Feb 05, 2019 at 04:19:16PM +0100, Tim Coen wrote: Please use CVE-2019-9567 for XSS vulnerability and CVE-2019-9568 for SQL-injection vulnerability - -- Henri Salo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE/aVSDznAZReWTkxKJ633pE6qdXQFAlx9zwAACgkQJ633pE6q dXScdQ/+NVNYUW7vnrffGyXzEN1sL ...

CWE-79 https://wordpress.org/plugins/forminator/#developers https://security-consulting.icu/blog/2019/02/wordpress-forminator-persistent-xss-blind-sql-injection/https://lists.openwall.net/full-disclosure/2019/02/05/4 https://wpvulndb.com/vulnerabilities/9215 https://nvd.nist.gov http://seclists.org/fulldisclosure/2019/Mar/10

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-9567

Vulnerability Summary

Vulnerability Trend

Mailing Lists

References

Vulmon Search

About

Products

Connect