CVE-2024-12037

🗓️ 31 Jan 2025 11:11:10Reported by WordfenceType

Vulnerability in WordPress plugin allows stored cross-site scripting for user profiles via shortcode.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-12037	31 Jan 202511:15	–	circl
CNNVD	WordPress plugin Post Form 跨站脚本漏洞	31 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-12037 Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting	31 Jan 202511:11	–	cvelist
EUVD	EUVD-2024-50550	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12037	31 Jan 202511:15	–	nvd
Patchstack	WordPress BuddyForms plugin <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability	31 Jan 202522:38	–	patchstack
Positive Technologies	PT-2025-1732 · WordPress · The Post Form – Registration Form – Profile Form For User Profiles – Frontend Content Forms For User Submissions	31 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-12037	23 May 202507:10	–	redhatcve
Vulnrichment	CVE-2024-12037 Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting	31 Jan 202511:11	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (January 27, 2025 to February 2, 2025)	7 Feb 202516:53	–	wordfence

Vulners

Node

themekraft post_form_registration_form_profile_form_for_user_profiles_frontend_content_forms_for_user_submissions_(ugc)Range≤2.8.13wordpress

[
  {
    "vendor": "themekraft",
    "product": "Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.8.13",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/accd4f34-4e10-4c83-96c3-c2a078ecd5cc
plugins	www.plugins.trac.wordpress.org/changeset/3231602/buddyforms/trunk/includes/shortcodes.php

15 Apr 2026 00:35Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.4

EPSS0.00185

SSVC

CWE-79