PT-2019-8531
CVE-2017-18600
·
تاريخ النشر
2019-09-10
·
تاريخ التحديث
2019-09-10
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
formcraft3 plugin versions prior to 3.4 for WordPress
Description
The issue is related to stored XSS, which occurs via the "New Form > Heading > Heading Text" field. This allows for malicious input to be stored and executed, potentially leading to security breaches.
Recommendations
For formcraft3 plugin versions prior to 3.4, update to version 3.4 or later to resolve the issue.
As a temporary workaround, consider restricting access to the "New Form > Heading > Heading Text" field until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾