Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Form Builder | Create Responsive Contact Forms 1.9.8.4

  • Severity: medium-risk
  • Status: Open
  • Publication: August 9, 2021

The Form Builder | Create Responsive Contact Forms plugin for WordPress has an issue with security in versions up to, and including, 1.9.8.4. This vulnerability could allow an unauthenticated attacker to inject malicious web scripts into pages that would execute if the user performs an action such as clicking a link. This is due to the lack of sanitization and output escaping of the ‘form_id’ parameter.

Detected in:

Form Builder | Create Responsive Contact Forms open vulnerable versions: >= * <= 1.9.8.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.