CVE-2024-13381

The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13381

The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13381

creationtimestamp| type| source ---|---|--- 2025-05-01 06:13:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14241 2025-05-01 09:55:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo426b3sm624 2025-05-01 10:39:15+00:00| seen| https://t.me/cvedetector/24199...

CVE-2024-13381 Calculated Fields Form < 5.2.62 - Admin+ Stored XSS

The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...