CVE-2023-0096

The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0096 Happyforms < 1.22.0 - Contributor+ Stored XSS

The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0096

The Happyforms WordPress plugin has a Stored XSS vulnerability in versions before 1.22.0 caused by insufficient validation/escaping of certain block options when the block is embedded. This allows users with the Contributor role or higher to cause stored XSS on pages or posts. Root cause: unescap...

WordPress Happyforms Plugin < 1.22.0 is vulnerable to Cross Site Scripting (XSS)

Software Happyforms Type Plugin Vulnerable versions 1.22.0 Fixed in 1.22.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0096 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d99bfc7fc4ba Credits Lana Codes Required...