Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbMgthuramoemyintWPVDB-ID:1806FEF3-D774-46E0-AA48-7A101495F4EB
HistoryMay 22, 2024 - 12:00 a.m.

Arforms < 6.4.1 - Reflected XSS

2024-05-2200:00:00
mgthuramoemyint
wpscan.com
2
arforms
plugin
xss
user input
ajax actions

AI Score

6.5

Confidence

High

JSON

Description The plugin does not properly escape user-controlled input when it is reflected in some of its AJAX actions.

PoC

https://www.example.com/wp-admin/admin-ajax.php?action=current_modal&amp;position;_modal=

Related

cvelist 1
cve 1
wpexploit 1
vulnrichment 1
nvd 1
cvelist
cvelist
CVE-2024-0427 Arforms < 6.4.1 - Reflected XSS
2024-06-12 06:00:02
cve
cve
CVE-2024-0427
2024-06-12 06:15:08
wpexploit
wpexploit
Arforms < 6.4.1 - Reflected XSS
2024-05-22 00:00:00
vulnrichment
vulnrichment
CVE-2024-0427 Arforms < 6.4.1 - Reflected XSS
2024-06-12 06:00:02
nvd
nvd
CVE-2024-0427
2024-06-12 06:15:08

AI Score

6.5

Confidence

High

JSON
Related for WPVDB-ID:1806FEF3-D774-46E0-AA48-7A101495F4EB
cvelist1cve1wpexploit1vulnrichment1nvd1