CVE-2023-0096 Happyforms < 1.22.0 - Contributor+ Stored XSS

The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0096 Happyforms < 1.22.0 - Contributor+ Stored XSS

The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

PT-2023-16010

Name of the Vulnerable Software and Affected Versions Happyforms WordPress plugin versions prior to 1.22.0 Description The issue concerns the Happyforms WordPress plugin, which does not properly validate and escape certain block options before outputting them in a page or post where the block is...

CVE-2023-0096: Undefined Security Weakness

The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress Plugin Happyforms Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Happyforms < 1.22.0 - Contributor+ Stored XSS

The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Exploit Additional CSS classes for "Forms" Gutenberg...

Happyforms < 1.22.0 - Contributor+ Stored XSS

The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. PoC Exploit Additional CSS classes for "Forms" Gutenbe...

WordPress Happyforms Plugin < 1.22.0 is vulnerable to Cross Site Scripting (XSS)

Software Happyforms Type Plugin Vulnerable versions 1.22.0 Fixed in 1.22.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0096 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d99bfc7fc4ba Credits Lana Codes Required...