WordPress Plugin Vulnerabilities

A Forms 1.4.0 - a-forms.php a_form_tracking_page Function Multiple Parameter XSS

Description

The A Forms WordPress plugin was affected by an a-forms.php a_form_tracking_page Function Multiple Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
a-forms
Fixed in 1.4.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
2b0b02ff-7ac0-466f-86a6-6201eb29b9e0

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-10-14
Title
Slimstat Analytics < 5.2.7 - Unauthenticated Stored Cross-Site Scripting
Published
2026-01-23
Title
GZSEO < 2.0.12 - Authenticated (Contributor+) Authorization Bypass to Stored Cross-Site Scripting
Published
2024-12-30
Title
GeoDirectory < 2.3.85 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2014-08-01
Title
Broken Link Checker 1.9.1 - Bulk Action Form URL H&ling XSS
Published
2024-12-02
Title
Campaign Monitor Forms by Optin Cat < 2.5.8 - Reflected Cross-Site Scripting