CVE-2021-25107CWE-79

CVE-2021-25107: vulnerability in Form Store to DB

Form Store to DB < 1.1.1 - Unauthenticated Stored Cross-Site Scripting

Published · Updated

Follow this CVE+ Monitor Form Store to DB

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
The Form Store to DB WordPress plugin before 1.1.1 does not sanitise and escape parameter keys before outputting it back in the created entry, allowing unauthenticated attacker to perform Cross-Site Scripting attacks against admin
Affected products
Unknown · Form Store to DB