CVE-2024-45625

Name of the Vulnerable Software and Affected Versions: Forminator versions prior to 1.34.1

Description: A cross-site scripting vulnerability exists in the software. If this issue is exploited, an arbitrary script may be executed on the web browser of the user who follows a crafted URL and accesses the webpage with the web form created by the software.

Recommendations: For versions prior to 1.34.1, update to version 1.34.1 or later to resolve the issue. As a temporary workaround, consider restricting access to web forms created by the software until a patch is applied. Avoid using the software to create new web forms that could be exploited until the issue is resolved.