Multi Step Form Security Vulnerabilities and Issues — Multi Step Form CVE List

Lucene search

MondulaMulti Step Form

2 matches found

CVE•added 2018/07/25 11:29 p.m.•37 views

CVE-2018-14430

The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fw_data [id][1], fw_data [id][2], fw_data [id][3], fw_data [id][4], or email field of the contact form, exploitable with an fw_send_email action to wp-admin/admin-ajax.php.

6.1CVSS6.2AI score0.0082EPSS

CVE•added 2018/12/20 11:29 p.m.•31 views

CVE-2018-14846

The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php.

5.4CVSS5.4AI score0.00231EPSS