CVE-2023-3134

Forminator < 1.24.4 - Reflected XSS

published July 31, 2023

CVSS
—
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04087 · 90.7th percentile
Published
2023-07-31T09:37Z
EPSS history
Timeline
  • 31 JUL 09:37Z
    Forminator < 1.24.4 - Reflected XSS
    cvelistv5