4 matches found
CVE-2024-29820
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedNao PDF Builder for WPForms allows Stored XSS.This issue affects PDF Builder for WPForms: from n/a through 1.2.88...
CVE-2024-29820
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedNao PDF Builder for WPForms allows Stored XSS.This issue affects PDF Builder for WPForms: from n/a through 1.2.88...
CVE-2024-29820
CVE-2024-29820 is a stored XSS in RedNao PDF Builder for WPForms caused by improper neutralization of input during web page generation. Affected product: PDF Builder for WPForms, versions: n/a through 1.2.88. CVSS 3.1 vector: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L (base 6.5, MEDIUM). Connected sourc...
WordPress PDF Builder for WPForms Plugin <= 1.2.88 is vulnerable to Cross Site Scripting (XSS)
Software PDF Builder for WPForms Type Plugin Vulnerable versions = 1.2.88 Fixed in 1.2.89 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29820 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7f7911ba8d07 Credits LVT-tholv2k Required privile...