Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-24718

The Contact Form, Survey & Popup Form Plugin for WordPress plugin before 1.5 does not properly sanitize some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.2%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 3.5
Products affected by CVE-2021-24718
  • None » None » Version:
    _survey_&_popup_form_plugin_for_wordpress_-_arforms_form_builder:1.0
  • None » None » Version:
    _survey_&_popup_form_plugin_for_wordpress_-_arforms_form_builder:1.1
  • None » None » Version:
    _survey_&_popup_form_plugin_for_wordpress_-_arforms_form_builder:1.2
  • None » None » Version:
    _survey_&_popup_form_plugin_for_wordpress_-_arforms_form_builder:1.3
  • None » None » Version:
    _survey_&_popup_form_plugin_for_wordpress_-_arforms_form_builder:1.4
  • Reputeinfosystems » Contact Form » Version: Any
    cpe:2.3:a:reputeinfosystems:contact_form


Products
Pricing
Contact Us

Shodan ® - All rights reserved