- Description
- Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who follows a crafted URL and accesses the webpage with the web form created by Forminator.
- Source
- vultures@jpcert.or.jp
- NVD status
- Analyzed
CVSS 3.1
- Type
- Primary
- Base score
- 6.1
- Impact score
- 2.7
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
- nvd@nist.gov
- CWE-79
- Hype score
- Not currently trending
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:incsub:forminator:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "8E8BE6AB-1155-4FD3-AD4B-D87C1A347C71", "versionEndExcluding": "1.34.1" } ], "operator": "OR" } ] } ]