CVE-2021-24884: Improper Neutralization of Input During Web Page Generation

The Formidable Form Builder WordPress plugin before 4.09.05 allows to inject certain HTML Tags like , , , and .This could allow an unauthenticated, remote attacker to exploit a HTML-injection byinjecting a malicous link. The HTML-injection may trick authenticated users to follow the link. If the...

PT-2021-22537

Name of the Vulnerable Software and Affected Versions: Formidable Form Builder WordPress plugin versions up to and including 5.0.06 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input validation and sanitization in the /classes/helpers/FrmAppHelper.php file...