Lucene search
PRIOn knowledge basePRION:CVE-2023-0439HistoryJul 17, 2023 - 2:15 p.m.
Cross site scripting
2023-07-1714:15:00
PRIOn knowledge base
www.prio-n.com
3
nex-forms
wordpress plugin
8.4.4
stored cross-site scripting
lower roles
vulnerability
The NEX-Forms WordPress plugin before 8.4.4 does not escape its form name, which could lead to Stored Cross-Site Scripting issues. By default only SuperAdmins (in multisite) / admins (in single site) can create forms, however there is a settings allowing them to give lower roles access to such feature.
Related
cve
cve
CVE-2023-0439
2023-07-17 14:15:09
wpexploit
wpexploit
NEX-Forms < 8.4.4 - Authenticated Stored XSS
2023-06-26 00:00:00
cvelist
cvelist
CVE-2023-0439 NEX-Forms < 8.4.4 - Authenticated Stored XSS
2023-07-17 13:29:58
nvd
nvd
CVE-2023-0439
2023-07-17 14:15:09
wpvulndb
wpvulndb
NEX-Forms < 8.4.4 - Authenticated Stored XSS
2023-06-26 00:00:00
wordfence
wordfence