CVE-2021-24505 | BDVDB-2026-158384 Detail

Forms

Description#

The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the Forms "Add new" field.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/550e08ac-4c3a-4e22-8e98-bc5bfc020ca9

Exploit#

No public exploit known

History#

Version 12021-08-09Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.