CVE-2022-0830

The CVE-2022-0830 entry describes a CSRF/XS S vulnerability in the WordPress FormBuilder plugin (<= 1.08). The plugin fails CSRF checks when creating/updating/deleting forms and does not sanitize/escape form field values, enabling an authenticated attacker to cause a logged-in admin to update/...