CVE-2024-31857

Summary

Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote attacker may obtain user information etc. and alter the page contents on the user's web browser.

Affected Software

Weaknesses

• Cross-site scripting (XSS)

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://wordpress.org/plugins/forminator/
• https://wpmudev.com/
• https://jvn.jp/en/jp/JVN50132400/

References

• https://wordpress.org/plugins/forminator/
• https://wpmudev.com/
• https://jvn.jp/en/jp/JVN50132400/

• ←Previous
• Next→