WordPress Plugin Vulnerabilities

Form Maker 1.6.4 - front_end_form_maker.php Unspecified XSS

Description

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin was affected by a front_end_form_maker.php Unspecified XSS security vulnerability.

Affects Plugins

Plugin icon
form-maker
Fixed in 1.6.6

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
4.8 (medium)

Miscellaneous

Original Researcher
Mateusz Lach
Verified
No
WPVDB ID
bc7ece1a-e917-48a3-9078-ee3d4a4e713c

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-07-12 (about 5 years ago)

Other

Published
Title
Published
2022-01-27
Title
WHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)
Published
2026-03-25
Title
ShortPixel Image Optimizer < 6.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title
Published
2014-08-01
Title
Your Text Manager < 0.3.0 - Cross-Site Scripting (XSS)
Published
2024-10-17
Title
Parcel Pro < 1.9.0 - Reflected Cross-Site Scripting
Published
2022-02-14
Title
Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify