CVE-2021-24608
25.10.2021, 14:15
The Formidable Form Builder Contact Form, Survey & Quiz Forms Plugin for WordPress plugin before 5.0.07 does not sanitise and escape its Form's Labels, allowing high privileged users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
| Vendor | Product | Version |
|---|---|---|
| strategy11 | formidable_form_builder | 𝑥 < 5.0.07 |
𝑥
= Vulnerable software versions