Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-64662
HistoryJun 13, 2022 - 12:00 a.m.

WordPress Forms by Pie Forms plugin cross-site scripting vulnerability

2022-06-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
wordpress
pie forms
cross-site scripting
vulnerability
javascript

EPSS

0.001

Percentile

24.8%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions prior to Forms by Pie Forms plugin 1.4.9.4, which stems from a failure to clean up and escape some form fields. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

24.8%