WordPress FormsCRM Plugin <= 3.5.1 is vulnerable to Cross Site Scripting (XSS)

Software FormsCRM Type Plugin Vulnerable versions = 3.5.1 Fixed in 3.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID bf6f153f12ef Credits Rafie Muhammad Patchstack Required privilege...

WordPress FormsCRM plugin < 3.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress FormsCRM plugin versions 3.6. Solution Update the WordPress FormsCRM plugin to the latest available version at least 3.6...

WordPress FormsCRM plugin < 3.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress FormsCRM plugin versions 3.6. Solution Update the WordPress FormsCRM plugin to the latest available version at least 3.6...