WordPress CRM Perks Forms Plugin <= 1.1.0 is vulnerable to Reflected Cross Site Scripting (XSS) vulnerability
CVE-2022-38467

6.1MEDIUM

Key Information:

Vendor: Wordpress
Status: Crm Perks Forms – WordPress Form Builder
Vendor: CVE Published:; 14 January 2023

Summary

Reflected Cross-Site Scripting (XSS) vulnerability in CRM Perks Forms – WordPress Form Builder <= 1.1.0 ver.

Affected Version(s)

CRM Perks Forms – WordPress Form Builder <= 1.1.0

References

https://patchstack.com/database/vulnerability/crm-perks-f...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Jan 14, 2023
Vulnerability Reserved
Sep 27, 2022

Credit

Tien Nguyen Anh (Patchstack Alliance)

.