WordPress Visual Form Builder <3.0.8 - Cross-Site Scripting
WordPress Visual Form Builder plugin before 3.0.8 contains a cross-site scripting vulnerability. The plugin does not perform access control on entry form export, allowing an unauthenticated user to export the form entries as CSV files using the vfb-export endpoint.
visual_form_builderPoC 已收录
CVSS5.3EPSS 9.6%