Lucene search

K
patchstackHuynh Tien SiPATCHSTACK:33E0FCAEF600A163E20C4E90B5EAAE79
HistoryMay 07, 2024 - 12:00 a.m.

WordPress Form Maker by 10Web Plugin <= 1.15.24 is vulnerable to Cross Site Scripting (XSS)

2024-05-0700:00:00
Huynh Tien Si
patchstack.com
2
wordpress
form maker
10web
plugin
cross site scripting
xss
vulnerable
security issue
low severity

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

AI Score

6.6

Confidence

High

Software

Form Maker by 10Web

Type

Plugin

Vulnerable versions

<= 1.15.24

Fixed in

1.15.25

OWASP Top 10

A3: Injection

Classification

Cross Site Scripting (XSS)

CVE

CVE-2024-34437

Patch priority

Low

CVSS severity

Low (5.9)

Developer

Claim ownership

PSID

bccbcab6c64f

Credits

Huynh Tien Si Huynh Tien Si

Required privilege

Administrator

Published

7 May, 2024

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
10web_form_builder_teamform_maker_by_10webRange1.15.24
VendorProductVersionCPE
10web_form_builder_teamform_maker_by_10web*cpe:2.3:a:10web_form_builder_team:form_maker_by_10web:*:*:*:*:*:*:*:*

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

AI Score

6.6

Confidence

High

Related for PATCHSTACK:33E0FCAEF600A163E20C4E90B5EAAE79