CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2021-24700 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.15.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 1.15.4 | 1.15.4 | 2021-10-20 | — |
The Forminator plugin versions prior to 1.15.4 fails to properly sanitize and escape the email field label, potentially enabling authenticated users with elevated privileges to inject malicious scripts even when the unfiltered_html capability is restricted.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.