Back to search
CVE-2022-23988
Published: Feb 28, 2022
Modified: Aug 3, 2024
PUBLISHED
Description
The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape submitted form data, allowing unauthenticated attacker to submit XSS payloads which will get executed when a privileged user will view the related submission
| Vendor | Product | Versions |
|---|---|---|
WS Form | WS Form LITE – Drag & Drop Contact Form Builder for WordPress | affected 1.8.176 - < 1.8.176 |
WS Form | WS Form Pro | affected 1.8.176 - < 1.8.176 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now