Dwbooster Calculated Fields Form vulnerabilities

1 known vulnerability affecting dwbooster/calculated_fields_form.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-6446MEDIUMCVSS 4.8≤ 1.2.402024-01-11

CVE-2023-6446 [MEDIUM] CWE-87 CVE-2023-6446: The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adm The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.40 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pa