WordPress Plugin Vulnerabilities

A Forms 1.4.0 - a-forms.php a_form_section_page Function message Parameter XSS

Description

The A Forms WordPress plugin was affected by a a-forms.php a_form_section_page Function message Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
a-forms
Fixed in 1.4.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
3ca1e62c-7f80-4d12-b588-85b79be6aa2e

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-01-24
Title
LearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Authenticated (LP Instructor+) Stored Cross-Site Scripting via Lesson Name
Published
2025-03-21
Title
Bitspecter Suite < 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Published
2025-01-07
Title
Icons Enricher <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-11-06
Title
WP-UserOnline < 2.88.3 - Unauthenticated Stored XSS
Published
2025-03-27
Title
Quick Localization <= 0.1.0 - Reflected Cross-Site Scripting