PT-2021-16352 · WordPress · Formidable Form Builder

Name of the Vulnerable Software and Affected Versions: Formidable Form Builder WordPress plugin versions prior to 4.09.05 Description: The issue allows an unauthenticated, remote attacker to inject certain HTML tags, such as , , , , and , which could lead to a HTML-injection attack by injecting a...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin The Formidable Form Builder prio...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the WordPress plugin Formidable Form Builder â€" Contact Form, Survey...

CVE-2021-24884: Improper Neutralization of Input During Web Page Generation

The Formidable Form Builder WordPress plugin before 4.09.05 allows to inject certain HTML Tags like , , , and .This could allow an unauthenticated, remote attacker to exploit a HTML-injection byinjecting a malicous link. The HTML-injection may trick authenticated users to follow the link. If the...

PT-2021-16123

Name of the Vulnerable Software and Affected Versions Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress versions prior to 5.0.07 Description The issue allows high privileged users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping o...

PT-2021-22537

Name of the Vulnerable Software and Affected Versions: Formidable Form Builder WordPress plugin versions up to and including 5.0.06 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input validation and sanitization in the /classes/helpers/FrmAppHelper.php file...

WordPress Formidable Forms plugin <= 5.0.06 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Thinkland Security Team in WordPress Formidable Forms plugin versions = 5.0.06. Solution Update the WordPress Formidable Forms plugin to the latest available version at least 5.0.07...

Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its Form's Labels, allowing high privileged users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC Create/edit a form, add the following payload to a Field Label: The XSS will be triggered when...

Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its Form's Labels, allowing high privileged users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Create/edit a form, add the following payload to a Field Label: alert/XSS/ The XSS will be triggered when...

WordPress Formidable Form Builder plugin <= 4.09.04 - Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by Maximilian Barz in WordPress Formidable Form Builder plugin versions = 4.09.04. Solution Update the WordPress Formidable Form Builder plugin to the latest available version at least 4.09.05...

WordPress Formidable Forms Builder Plugin < 4.02.01 RCE Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113509";...

WordPress formidable plugin code issue vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. formidable is a form builder used in it. A code issue vulnerability exists in the WordPress formidable plugin prior to version 4.02.01...

CVE-2019-15780

The formidable plugin before 4.02.01 for WordPress has unsafe deserialization...

CVE-2019-15780

The formidable plugin before 4.02.01 for WordPress has unsafe deserialization...

Deserialization of untrusted data

The formidable plugin before 4.02.01 for WordPress has unsafe deserialization...

CVE-2019-15780

The formidable plugin before 4.02.01 for WordPress has unsafe deserialization...

CVE-2019-15780: Deserialization of Untrusted Data

The formidable plugin before 4.02.01 for WordPress has unsafe deserialization...

PT-2019-14389

Name of the Vulnerable Software and Affected Versions formidable plugin versions prior to 4.02.01 Description The issue is related to unsafe deserialization in the formidable plugin for WordPress. Recommendations For versions prior to 4.02.01, update to version 4.02.01 or later to resolve the iss...

Formidable < 4.02.01 - Unsafe Deserialisation

The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress WordPress plugin was affected by an Unsafe Deserialisation security vulnerability...

WordPress Formidable Form Builder plugin <= 4.02 - Unsafe Deserialisation vulnerability

Unsafe Deserialisation vulnerability discovered in WordPress Formidable Form Builder plugin versions = 4.02. Solution Update the WordPress Formidable Form Builder plugin to the latest available version at least 4.02.01...