cve/2021/CVE-2021-24505.md
2025-09-29 21:09:30 +02:00

800 B

CVE-2021-24505

Description

The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the Forms "Add new" field.

POC

Reference

Github