JetFormBuilder < 3.1.5 - Unauthenticated Content Injection

2023-12-0700:00:00

wpscan.com

jetformbuilder

wordpress

vulnerable

content injection

unauthenticated

attackers

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Description The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to content injection in all versions up to, and including, 3.1.4. This makes it possible for unauthenticated attackers to inject content onto the site.

CPENameOperatorVersion
eq3.1.5

CPE	Name	Operator	Version
		eq	3.1.5

References

www.wordfence.com/threat-intel/vulnerabilities/id/f0343861-a376-43ea-826e-277c2a5ea635