CVE-2021-24513
EUVD-2021-1142506.09.2021, 11:15
The Form Builder | Create Responsive Contact Forms WordPress plugin before 1.9.8.4 does not sanitise or escape its Form Title, allowing high privilege users such as admin to set Cross-Site Scripting payload in them, even when the unfiltered_html capability is disallowed
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| web-settler | form_builder | 𝑥 < 1.9.8.4 |
𝑥
= Vulnerable software versions