PT-2019-8531 · WordPress · Formcraft3

Publicado 2019-09-10 · Atualizado 2019-09-10 · CVE-2017-18600

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions formcraft3 plugin versions prior to 3.4 for WordPress

Description The issue is related to stored XSS, which occurs via the "New Form > Heading > Heading Text" field. This allows for malicious input to be stored and executed, potentially leading to security breaches.

Recommendations For formcraft3 plugin versions prior to 3.4, update to version 3.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the "New Form > Heading > Heading Text" field until the update is applied.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-18600

Produtos afetados

Formcraft3

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-18600 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-18600 · Aviso do Fabricante
• https://t.me/cibsecurity/6647 · Publicação no Telegram
• https://wpvulndb.com/vulnerabilities/8877 · Nota