Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
FormzuFormzu Wp

2 matches found

CVE
CVE•added 2023/12/15 1:54 p.m.•50 views

CVE-2023-49160

CVE-2023-49160 is a stored XSS vulnerability in the WordPress Formzu WP plugin (Formzu WP) affecting versions 1.6.6 and earlier. The issue stems from improper neutralization of input during web page generation, enabling stored cross-site scripting. Red Hat and Patchstack corroborate the vulnerabi...

6.5CVSS6.7AI score0.00409EPSS
CVE
CVE•added 2024/01/31 4:46 p.m.•50 views

CVE-2024-22310

CVE-2024-22310 affects Formzu WP (WordPress plugin) up to version 1.6.7 and is caused by improper neutralization of input during web page generation, enabling Stored XSS. The vulnerability targets the plugin’s handling of user-supplied input in the WordPress pages, leading to cross-site scripting...

6.5CVSS6.7AI score0.00317EPSS