Security Advisory

CVE-2022-1046

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-05-02 16:05:48

Last updated 2024-08-02 23:47:43

Assigner WPScan

State PUBLISHED

Description

The Visual Form Builder WordPress plugin before 3.0.7 does not sanitise and escape the forms Email to field , which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

← Browse all CVEs View on cve.org ↗