Code Injection Vulnerability in Formidable Forms

CVE-2024-23522

5.3MEDIUM

Key Information

Vendor: Strategy11 Form Builder Team
Status: Formidable Forms
Vendor: CVE Published:; 17 May 2024

Summary

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Strategy11 Form Builder Team Formidable Forms allows Code Injection.This issue affects Formidable Forms: from n/a through 6.7.

Affected Version(s)

Formidable Forms <= 6.7

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
May 17, 2024
Vulnerability Reserved.
Jan 17, 2024

Collectors

NVD DatabaseMitre Database

Credit

Revan Arifio (Patchstack Alliance)