Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-3134
HistoryJul 31, 2023 - 10:15 a.m.

Cross site scripting

2023-07-3110:15:00
PRIOn knowledge base
www.prio-n.com
1
forminator
wordpress
plugin
reflected
xss
attacks
pre-populated
query parameters

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.3%

The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks.

CPENameOperatorVersion
forminatorlt1.24.4

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.3%