FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scriptin
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
![]() | Cross site scripting | 8 Jun 202210:15 | – | prion |
![]() | CVE-2022-1647 | 8 Jun 202210:15 | – | cve |
![]() | FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scripting | 16 May 202200:00 | – | wpvulndb |
![]() | WordPress FormCraft plugin cross-site scripting vulnerability | 13 Jun 202200:00 | – | cnvd |
![]() | CVE-2022-1647 | 8 Jun 202210:15 | – | nvd |
![]() | CVE-2022-1647 FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scripting | 6 Jun 202208:51 | – | cvelist |
![]() | WordPress FormCraft Basic plugin <= 1.2.5 - Stored Cross-Site Scripting (XSS) vulnerability | 16 May 202200:00 | – | patchstack |
Put the following payload into a Field Label and save: <img src onerror=alert(/XSS/)>
The XSS will be triggered when accessing the form again, as well as in pages/posts where the form is embed
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo