Lucene search
PRIOn knowledge basePRION:CVE-2022-1564HistoryMay 30, 2022 - 9:15 a.m.
Cross site scripting
2022-05-3009:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
25.0%
The Form Maker by 10Web WordPress plugin before 1.14.12 does not sanitize and escape the Custom Text settings, which could allow high privilege user such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
| CPE | Name | Operator | Version |
|---|---|---|---|
| form_maker | le | 1.14.12 |
Related
patchstack
patchstack
nvd
nvd
CVE-2022-1564
2022-05-30 09:15:09
cve
cve
CVE-2022-1564
2022-05-30 09:15:09
wpexploit
wpexploit
Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting
2022-05-09 00:00:00
wpvulndb
wpvulndb
Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting
2022-05-09 00:00:00
cvelist
cvelist