CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
AI Score
Confidence
High
Software
Form Maker by 10Web
Type
Plugin
Vulnerable versions
<= 1.15.24
Fixed in
1.15.25
OWASP Top 10
A3: Injection
Classification
Cross Site Scripting (XSS)
CVE
CVE-2024-34437
Patch priority
Low
CVSS severity
Low (5.9)
Developer
Claim ownership
PSID
bccbcab6c64f
Credits
Huynh Tien Si
Required privilege
Administrator
Published
7 May, 2024
Expand full details Have additional information or questions about this entry? Let us know.
This security issue has a low severity impact and is unlikely to be exploited.
Vendor | Product | Version | CPE |
---|---|---|---|
10web_form_builder_team | form_maker_by_10web | * | cpe:2.3:a:10web_form_builder_team:form_maker_by_10web:*:*:*:*:*:*:*:* |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
AI Score
Confidence
High