Plugin Vulnerability: Inadequate User Input Escaping in AJAX Actions
CVE-2024-0427
Currently unrated
What is CVE-2024-0427?
The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions.
Affected Version(s)
ARForms - Premium WordPress Form Builder Plugin 0 < 6.4.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.