Lucene search
WpvulndbWPVDB-ID:8985F9AC-C56B-4989-830B-F873722692A0HistoryDec 08, 2023 - 12:00 a.m.
Formzu WP < 1.6.7 - Contributor+ Stored XSS via id
2023-12-0800:00:00
wpscan.com
7
formzu plugin
wordpress
xss
contributor role
Description The plugin does not validate and escape the ‘id’ parameter, allowing users with the contributor role and above perform Stored XSS attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 1.6.7 |
Related
nvd
nvd
CVE-2023-49160
2023-12-15 14:15:15
prion
prion
Cross site scripting
2023-12-15 14:15:00
cvelist
cvelist
cve
cve
CVE-2023-49160
2023-12-15 14:15:15
wordfence
wordfence
5.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.2%
Related for WPVDB-ID:8985F9AC-C56B-4989-830B-F873722692A0