PRODUCT PROFILE

formidable_form_builder

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2017-201922024/10/16

Formidable Forms < 2.05.02 - Cross-Site Scripting

The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'after_html' in versions before 2.05.03 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute in a victim's browser.

formidable_form_builderPoC 已收录

CVSS6.1

中危CVE-2017-201942024/10/16

Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frm_forms_preview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form.

formidable_form_builderPoC 已收录

CVSS5.3