Lucene search

K
wpvulndbWpvulndbWPVDB-ID:2F10FEB1-474F-46D6-B484-129A3900DFE4
HistoryOct 20, 2023 - 12:00 a.m.

Form Maker by 10Web < 1.15.19 - Reflected XSS

2023-10-2000:00:00
wpscan.com
13
plugin
sanitization
reflected xss
high privilege users

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

20.2%

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

20.2%

Related for WPVDB-ID:2F10FEB1-474F-46D6-B484-129A3900DFE4