CVE-2017-18600

The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field

published September 10, 2019

CVSS
—
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00696 · 52.4th percentile
Published
2019-09-10T11:01Z
EPSS history
Timeline
  • 10 SEP 11:01Z
    The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field
    cvelistv5