CVE-2024-45625

Published: Sep 9, 2024

Modified: Mar 26, 2025

PUBLISHED

Description

Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who follows a crafted URL and accesses the webpage with the web form created by Forminator.

Vendor	Product	Versions
WPMU DEV	Forminator	affected `prior to 1.34.1`

References

https://wordpress.org/plugins/forminator/

https://plugins.trac.wordpress.org/changeset?new=3135507%40forminator%2Ftrunk%2Fassets%2Fjs%2Ffront%2Ffront.mergetags.js&old=3111152%40forminator%2Ftrunk%2Fassets%2Fjs%2Ffront%2Ffront.mergetags.js

https://wpmudev.com/

https://jvn.jp/en/jp/JVN65724976/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-45625

Description

Affected Products

References