WordPress FormsCRM Plugin <= 3.5.1 is vulnerable to Cross Site Scripting (XSS)

Software FormsCRM Type Plugin Vulnerable versions = 3.5.1 Fixed in 3.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID bf6f153f12ef Credits Rafie Muhammad Patchstack Required privilege...

WordPress FormsCRM plugin < 3.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress FormsCRM plugin versions 3.6. Solution Update the WordPress FormsCRM plugin to the latest available version at least 3.6...

WordPress FormsCRM plugin < 3.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress FormsCRM plugin versions 3.6. Solution Update the WordPress FormsCRM plugin to the latest available version at least 3.6...