CVE-2024-34437

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

4.8MEDIUM

EPSS

0.1%

top 66.85%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

10web Form Maker 10web Form Builder Team Form Maker BY 10web

Timeline

PublishedMay 14

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.24.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:LExploitability: 1.7 | Impact: 3.7

Affected Packages2 packages

▶CVEListV510web_form_builder_team/form_maker_by_10webn/a — 1.15.24

▶NVD10web/form_maker< 1.15.25

🔴Vulnerability Details

GHSA

GHSA-52wr-qfvp-rcxr: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Builder Team Form Maker by 10Web allo↗2024-05-14

▶

CVEList

WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability↗2024-05-09

▶