CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2020-10385 | WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.5.9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 1.5.9 | 1.5.9 | 2020-02-18 | — |
The WPForms plugin before version 1.5.9 contains a stored cross-site scripting vulnerability in the Form Builder module. The Form Description and Field Description fields fail to properly sanitize user input, allowing authenticated users to inject malicious scripts that are stored and executed in the application.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.