Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-3134

Published: 31/07/2023 Updated: 07/11/2023
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0
Subscribe to Incsub

Vulnerability Summary

The Forminator WordPress plugin prior to 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks.

Vulnerable Product Search on Vulmon Subscribe to Product

incsub forminator

References

https://wpscan.com/vulnerability/6d50d3cc-7563-42c4-977b-f834fee711dahttps://www.onvio.nl/nieuws/research-day-discovering-vulnerabilities-in-wordpress-pluginshttps://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook