CVE-2024-9528

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form label fields in all versions up to, and including, 5.1.19 due to insufficient input sanitization and output escaping. This makes it...

PT-2021-16123

Name of the Vulnerable Software and Affected Versions Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress versions prior to 5.0.07 Description The issue allows high privileged users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping o...

CVE-2021-24250

The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin...