Lucene search

PRIOn knowledge basePRION:CVE-2023-49160

HistoryDec 15, 2023 - 2:15 p.m.

Cross site scripting

2023-12-1514:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

web page generation

input neutralization

stored xss

formzu wp

nvd

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in formzu Inc. Formzu WP allows Stored XSS.This issue affects Formzu WP: from n/a through 1.6.6.

CPENameOperatorVersion
formzu_wplt1.6.7

CPE	Name	Operator	Version
	formzu_wp	lt	1.6.7

References

patchstack.com/database/vulnerability/formzu-wp/wordpress-formzu-wp-plugin-1-6-6-cross-site-scripting-xss-vulnerability?_s_id=cve