CVE Database /
CVE-2024-6518
CVE · Medium
CVE-2024-6518 — Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 5.1.20
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-6518
|
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 5.1.20 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
4.8
|
< 5.1.20
|
5.1.20 |
2024-07-26 |
—
|
CVE-2024-6518
The Contact Form Plugin by Fluent Forms, used for quiz, survey, and drag-and-drop form building on WordPress, is susceptible to stored cross-site scripting (XSS) attacks in all versions up to 5.1.19. Insufficient input sanitization and output escaping allow authenticated attackers with administrator privileges to inject malicious scripts that can be executed when other users view the affected pages. This vulnerability impacts multi-site setups where unfiltered_html is disabled.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings