CVE-2023-45071

2023-10-1813:15:09

CWE-79

[email protected]

web.nvd.nist.gov

unauthenticated

stored

cross-site scripting

xss

10web form builder

team form maker

10web

mobile-friendly

drag & drop

contact form builder

vulnerability

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

20.2%

JSON

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18 versions.

Affected configurations

Nvd

Node

10webform_makerRange<1.15.19wordpress

VendorProductVersionCPE
10webform_maker*cpe:2.3:a:10web:form_maker:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
10web	form_maker	*	cpe:2.3:a:10web:form_maker::::::wordpress::*

References

patchstack.com/database/vulnerability/form-maker/wordpress-form-maker-by-10web-mobile-friendly-drag-drop-contact-form-builder-plugin-1-15-18-cross-site-scripting-xss-vulnerability?_s_id=cve