Lucene search
+L

3 matches found

NVD
NVD
added 2024/04/18 11:15 a.m.32 views

CVE-2023-49768

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FormAssembly / Drew Buschhorn WP-FormAssembly allows Stored XSS.This issue affects WP-FormAssembly: from n/a through 2.0.10...

6.5CVSS6.4AI score0.00312EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/18 10:24 a.m.40 views

CVE-2023-49768 WordPress WP-FormAssembly plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FormAssembly / Drew Buschhorn WP-FormAssembly allows Stored XSS.This issue affects WP-FormAssembly: from n/a through 2.0.10...

6.5CVSS6.6AI score0.00312EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/04/16 12:0 a.m.19 views

WordPress WP-FormAssembly Plugin <= 2.0.10 is vulnerable to Cross Site Scripting (XSS)

Software WP-FormAssembly Type Plugin Vulnerable versions = 2.0.10 Fixed in 2.0.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49768 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2e39ae49a241 Credits Khalid Yusuf Required privilege...

6.5CVSS6.6AI score0.00312EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder