Description (CNA)
Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who follows a crafted URL and accesses the webpage with the web form created by Forminator.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WPMU DEV / Forminator | affected prior to 1.34.1 |
CWE
No CWE identifiers supplied.
References
- https://wordpress.org/plugins/forminator/
- https://plugins.trac.wordpress.org/changeset?new=3135507%40forminator%2Ftrunk%2Fassets%2Fjs%2Ffront%2Ffront.mergetags.js&old=3111152%40forminator%2Ftrunk%2Fassets%2Fjs%2Ffront%2Ffront.mergetags.js
- https://wpmudev.com/
- https://jvn.jp/en/jp/JVN65724976/
ADP enrichment
No English description supplied.
No references supplied.