Lucene search

Form Maker Security Vulnerabilities - 2023

cve

CVE-2023-45070

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18 versions.

7.1CVSS

6AI Score

0.001EPSS

2023-10-18 01:15 PM

cve

CVE-2023-45071

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18 versions.

7.1CVSS

5.7AI Score

0.001EPSS

2023-10-18 01:15 PM

cve

CVE-2023-4666

The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE

9.8CVSS

9.5AI Score

0.002EPSS

2023-10-16 08:15 PM