CVE-2021-24526
Assigner: WPScan
Published: 2021-08-16T10:48:26
State: PUBLISHED
affected: product: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
vendor: Unknown
versions: lessThan: 1.13.60
status: affected
version: 1.13.60
versionType: custom
credits: value: Felipe Restrepo Rodriguez
descriptions: value: The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin before 1.13.60 does not escape its Form Title before outputting it in an attribute when editing a form in the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: UNKNOWN
title: Form Maker < 1.13.60 - Authenticated Stored XSS
x_generator: WPScan CVE Generator