PT-2023-14778 · Repute Infosystems · Arforms Form Builder

·

CVE-2022-45838

·

Publicado

2023-04-18

·

Atualizado

2023-04-26

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Repute InfoSystems ARForms Form Builder plugin versions 1.5.5 and earlier
Description The issue is related to an Unauth. Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker can inject malicious scripts into the application, which can then be executed by other users, potentially leading to unauthorized actions or data theft.
Recommendations For Repute InfoSystems ARForms Form Builder plugin versions 1.5.5 and earlier, update to a version later than 1.5.5 to resolve the issue.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-45838

Produtos afetados

Arforms Form Builder