CVE-2023-5337

The Contact form Form For All plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formforall' shortcode in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacke...

CVE-2023-5337

The Contact form Form For All plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formforall' shortcode in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacke...

CVE-2023-5337

CVE-2023-5337 affects the WordPress plugin Contact form Form For All (formforall). It is vulnerable to Stored XSS via the formforall shortcode, in versions up to 1.2, due to insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires authenticated access...

WordPress Contact form Form For All Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Contact form Form For All Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5337 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 14aaff51ee15 Credits Lana Codes Require...