3 matches found
CVE-2022-0830
The CVE-2022-0830 entry describes a CSRF/XS S vulnerability in the WordPress FormBuilder plugin (<= 1.08). The plugin fails CSRF checks when creating/updating/deleting forms and does not sanitize/escape form field values, enabling an authenticated attacker to cause a logged-in admin to update/...
CVE-2016-10910
The CVE-2016-10910 refers to the WordPress FormBuilder plugin. Affected component: FormBuilder plugin before version 1.06 for WordPress. Description in sources: multiple cross-site scripting (XSS) issues. Practical impact stated: client-side code execution via XSS; exploitation details are not pr...
CVE-2012-6715
CVE-2012-6715 concerns the WordPress Formbuilder plugin, affected versions before 0.9.1. The vulnerability is a stored/reflective XSS via the Referer header, enabling execution of malicious client-side scripts. Documented impact is cross-site scripting; exploitation details beyond this risk descr...