5 matches found
CVE-2023-23796
Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Contact Forms.This issue affects Form Builder | Create Responsive Contact Forms: from n/a through 1.9.9.0...
CVE-2023-23796: Improper Neutralization of Formula Elements in a CSV File
Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Contact Forms.This issue affects Form Builder | Create Responsive Contact Forms: from n/a through 1.9.9.0...
CVE-2021-24513
Affected software: WordPress Form Builder plugin (pre-1.9.8.4). Vulnerability: Authenticated stored XSS via unsanitized/unsted Form Title. Root cause: Form Title not sanitized/escaped, enabling injection by privileged users (e.g., admin). Impact: Client-side script execution in admin context; aff...
PT-2021-16035
Name of the Vulnerable Software and Affected Versions The Form Builder | Create Responsive Contact Forms WordPress plugin versions prior to 1.9.8.4 Description The issue allows high privilege users, such as admins, to set Cross-Site Scripting payload in the Form Title, even when the unfiltered ht...
CVE-2021-24513: Improper Neutralization of Input During Web Page Generation
The Form Builder | Create Responsive Contact Forms WordPress plugin before 1.9.8.4 does not sanitise or escape its Form Title, allowing high privilege users such as admin to set Cross-Site Scripting payload in them, even when the unfilteredhtml capability is disallowed...