Lucene search
PRIOn knowledge basePRION:CVE-2022-0830HistoryApr 04, 2022 - 4:15 p.m.
Cross site scripting
2022-04-0416:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
26.4%
The FormBuilder WordPress plugin through 1.08 does not have CSRF checks in place when creating/updating and deleting forms, and does not sanitise as well as escape its form field values. As a result, attackers could make logged in admin update and delete arbitrary forms via a CSRF attack, and put Cross-Site Scripting payloads in them.
| CPE | Name | Operator | Version |
|---|---|---|---|
| formbuilder | le | 1.08 |
Related
cvelist
cvelist
CVE-2022-0830 FormBuilder <= 1.08 - Stored Cross-Site Scripting via CSRF
2022-04-04 15:35:50
cnvd
cnvd
WordPress FormBuilder plugin cross-site scripting vulnerability
2022-04-07 00:00:00
cve
cve
CVE-2022-0830
2022-04-04 16:15:09
wpvulndb
wpvulndb
FormBuilder <= 1.08 - Stored Cross-Site Scripting via CSRF
2022-03-08 00:00:00
nvd
nvd
CVE-2022-0830
2022-04-04 16:15:09
wpexploit
wpexploit
FormBuilder <= 1.08 - Stored Cross-Site Scripting via CSRF
2022-03-08 00:00:00