Lucene search
PRIOn knowledge basePRION:CVE-2021-24700HistoryNov 23, 2021 - 8:15 p.m.
Cross site scripting
2021-11-2320:15:00
PRIOn knowledge base
www.prio-n.com
1
0.001 Low
EPSS
Percentile
24.9%
The Forminator WordPress plugin before 1.15.4 does not sanitize and escape the email field label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
| CPE | Name | Operator | Version |
|---|---|---|---|
| forminator | lt | 1.15.4 |
Related
cve
cve
CVE-2021-24700
2021-11-23 20:15:09
openvas
openvas
WordPress Forminator Plugin < 1.15.4 XSS Vulnerability
2021-12-06 00:00:00
nvd
nvd
CVE-2021-24700
2021-11-23 20:15:09
wpvulndb
wpvulndb
Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting
2021-10-20 00:00:00
patchstack
patchstack
wpexploit
wpexploit
Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting
2021-10-20 00:00:00
cvelist
cvelist
CVE-2021-24700 Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting
2021-11-23 19:16:06