Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-23988

The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape submitted form data, allowing unauthenticated attacker to submit XSS payloads which will get executed when a privileged user will view the related submission
Exploit prediction scoring system (EPSS) score
EPSS Score 0.144
EPSS Ranking 94.1%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2022-23988


Contact Us

Shodan ® - All rights reserved