Lucene search
PRIOn knowledge basePRION:CVE-2022-23179HistoryJan 16, 2024 - 4:15 p.m.
Cross site scripting
2024-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
4
cross site scripting
contact form
lead form
elementor builder
wordpress
plugin
vulnerability
nvd
unfiltered_html
The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.0 does not escape some of its form fields before outputting them in attributes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
| CPE | Name | Operator | Version |
|---|---|---|---|
| contact_form_\\&_lead_form_elementor_builder | lt | 1.7.0 |
Related
cve
cve
CVE-2022-23179
2024-01-16 16:15:09
patchstack
patchstack
wpvulndb
wpvulndb
nvd
nvd
CVE-2022-23179
2024-01-16 16:15:09
wpexploit
wpexploit
cvelist
cvelist