CVE-2024-7056

creationtimestamp| type| source ---|---|--- 2024-11-25 06:17:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113542131773212483...

CVE-2024-7056 WPForms < 1.9.1.6 - Admin+ Stored XSS

The WPForms WordPress plugin before 1.9.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-7056

The WPForms WordPress plugin (versions prior to 1.9.1.6 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient sanitization and escaping of certain settings. This flaw allows high-privilege users, such as Admins , to perform XSS attacks, even in environments where the unfiltered...