CVE-2023-5337

CVE-2023-5337 affects the WordPress plugin Contact form Form For All (formforall). It is vulnerable to Stored XSS via the formforall shortcode, in versions up to 1.2, due to insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires authenticated access...

WordPress Contact form Form For All Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Contact form Form For All Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5337 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 14aaff51ee15 Credits Lana Codes Require...