Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Formbuilder Project Component: Formbuilder Clear all filters
TI-2022-00737 CVE-2022-0830 · GHSA-7453-hxjf-jh4q

FormBuilder <= 1.08 - Stored Cross-Site Scripting via CSRF

Priority LOW 30

The FormBuilder WordPress plugin through 1.08 does not have CSRF checks in place when creating/updating and deleting forms, and does not sanitise as well as escape its form field values.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00542 Published 2022-04-04 No fix listed CWE-352