Boletines de Vulnerabilidades

XSS Vulnerability found in WPForms Plugin < 1.5.9 – Update immediately

   
Software afectado Wordpress
 
https://www.getastra.com/blog/911/plugin-exploit/stored-xss-vulnerability-found-in-wpforms-plugin/ WPForms Plugin version 1.5.8.2 and below were found to be vulnerable to authenticated stored XSS while I was auditing the plugin. WPForms version 1.5.9 with improved data sanitization was released on March 5, 2020. Summary WPForms is a popular WordPress …

More info:

https://www.getastra.com/blog/911/plugin-exploit/stored-xss-vulnerability-found-in-wpforms-plugin/