Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-24514
HistoryOct 25, 2021 - 2:15 p.m.

Cross site scripting

2021-10-2514:15:00
PRIOn knowledge base
www.prio-n.com
1

0.001 Low

EPSS

Percentile

24.8%

The Visual Form Builder WordPress plugin before 3.0.4 does not sanitise or escape its Form Name, allowing high privilege users such as admin to set Cross-Site Scripting payload in them, even when the unfiltered_html capability is disallowed

CPENameOperatorVersion
visual_form_builderlt3.0.4

0.001 Low

EPSS

Percentile

24.8%

Related for PRION:CVE-2021-24514