CVE-2023-4950 — Funnelforms Free < 3.4 Unauthenticated Stored Cross-Site Scripting

CVE-2023-4950

Funnelforms Free < 3.4 Unauthenticated Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The Interactive Contact Form and Multi Step Form Builder WordPress plugin before 3.4 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks

Affected (CNA)

Vendor / product	Versions
Unknown / Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor	affected 0 before 3.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/73db1ee8-06a2-41b6-b287-44e25f5f2e58

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/73db1ee8-06a2-41b6-b287-44e25f5f2e58

CISA-ADP

No English description supplied.

No references supplied.