CVE-2021-24700

CVE-2021-24700 – Forminator WordPress plugin vulnerability : The WordPress Forminator plugin versions before 1.15.4 do not sanitize and escape the email field label, enabling stored Cross-Site Scripting (XSS) by high-privilege users. Affected software: Forminator Form plugin for WordPress; vulner...

PT-2021-16204

Name of the Vulnerable Software and Affected Versions Forminator WordPress plugin versions prior to 1.15.4 Description The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of the email field label, even when the unfiltered html...

CVE-2021-24700: Improper Neutralization of Input During Web Page Generation

The Forminator WordPress plugin before 1.15.4 does not sanitize and escape the email field label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...