Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Planso Component: Planso Forms Clear all filters
TI-2021-06803 CVE-2021-24516 · GHSA-p4vw-x9cg-642w

PlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site Scripting

Priority LOW 23

The PlanSo Forms WordPress plugin through 2.6.3 does not escape the title of its Form before outputting it in attributes, allowing high privilege users such as admin to set XSS payload in it, even when the unfiltered_htm…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00638 Published 2021-10-18 No fix listed CWE-79