CVE-2023-3501

CVE-2023-3501 affects the FormCraft WordPress plugin prior to 1.2.7. The issue is insufficient sanitisation/escaping of certain settings, enabling a Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in multisite). Reported impact is stored XSS with...

CVE-2017-13137

CVE-2017-13137 : Affects WordPress FormCraft Basic plugin 1.0.5. The vulnerability is an SQL injection in the id parameter of form.php, allowing potentially arbitrary SQL execution. Documented CVSS scores: CVSSv2 base 7.5 (HIGH) and CVSSv3.1 base 9.8 (CRITICAL). Exploitation details are not provi...