CVE-2022-23988: WS Form LITE – Drag & Drop Contact Form Builder for

Описание

Оригинално описание

The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape submitted form data, allowing unauthenticated attacker to submit XSS payloads which will get executed when a privileged user will view the related submission

Засегнати продукти

• WS Form WS Form LITE – Drag & Drop Contact Form Builder for WordPress: 1.8.176 преди 1.8.176
• WS Form WS Form Pro: 1.8.176 преди 1.8.176

Вид слабост

• CWE-79 XSS

История

Други уязвимости в WS Form WS Form LITE – Drag & Drop Contact Form Builder for WordPress

• 7.2CVE-2024-13509
• 4.7CVE-2023-5424
• 7.6CVE-2023-52135
• CVE-2022-23987

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-23988
• https://nvd.nist.gov/vuln/detail/CVE-2022-23988
• https://wpscan.com/vulnerability/9d5738f9-9a2e-4878-8a03-745894420bf6