Lucene search

K

CVE-2024-10182 Cognito Forms <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

🗓️ 12 Dec 2024 04:13:23Reported by WordfenceType 
cvelist
 cvelist
🔗 www.cve.org👁 4 Views

Cognito Forms plugin for WordPress allows stored cross-site scripting via 'id' parameter in versions <= 2.0.6.

Show more
Related
Affected
Refs
[
  {
    "vendor": "Cognito Apps",
    "product": "Cognito Forms",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.0.6",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo