← CVE Intelligence

CVE-2021-24505

Forms < 1.12.3 - Authenticated Stored Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the Forms "Add new" field.

Affected (CNA)

Vendor / productVersions
Unknown / Formsaffected 1.12.3 before 1.12.3

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.