CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-12038

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buddyforms_nav' shortcode in all versions up to, and including, 2.8.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 4.9%

CVSS Severity

CVSS v3 Score 6.4

References

Products affected by CVE-2024-12038

Themekraft » Buddyforms » Version: N/A

cpe:2.3:a:themekraft:buddyforms:-
Themekraft » Buddyforms » Version: 2.0

cpe:2.3:a:themekraft:buddyforms:2.0
Themekraft » Buddyforms » Version: 2.0.1

cpe:2.3:a:themekraft:buddyforms:2.0.1
Themekraft » Buddyforms » Version: 2.0.10

cpe:2.3:a:themekraft:buddyforms:2.0.10
Themekraft » Buddyforms » Version: 2.0.11

cpe:2.3:a:themekraft:buddyforms:2.0.11
Themekraft » Buddyforms » Version: 2.0.12

cpe:2.3:a:themekraft:buddyforms:2.0.12
Themekraft » Buddyforms » Version: 2.0.12.1

cpe:2.3:a:themekraft:buddyforms:2.0.12.1
Themekraft » Buddyforms » Version: 2.0.13

cpe:2.3:a:themekraft:buddyforms:2.0.13
Themekraft » Buddyforms » Version: 2.0.14

cpe:2.3:a:themekraft:buddyforms:2.0.14
Themekraft » Buddyforms » Version: 2.0.15

cpe:2.3:a:themekraft:buddyforms:2.0.15
Themekraft » Buddyforms » Version: 2.0.2

cpe:2.3:a:themekraft:buddyforms:2.0.2
Themekraft » Buddyforms » Version: 2.0.3

cpe:2.3:a:themekraft:buddyforms:2.0.3
Themekraft » Buddyforms » Version: 2.0.4

cpe:2.3:a:themekraft:buddyforms:2.0.4
Themekraft » Buddyforms » Version: 2.0.5

cpe:2.3:a:themekraft:buddyforms:2.0.5
Themekraft » Buddyforms » Version: 2.0.6

cpe:2.3:a:themekraft:buddyforms:2.0.6
Themekraft » Buddyforms » Version: 2.0.7

cpe:2.3:a:themekraft:buddyforms:2.0.7
Themekraft » Buddyforms » Version: 2.0.8

cpe:2.3:a:themekraft:buddyforms:2.0.8
Themekraft » Buddyforms » Version: 2.0.9

cpe:2.3:a:themekraft:buddyforms:2.0.9
Themekraft » Buddyforms » Version: 2.1

cpe:2.3:a:themekraft:buddyforms:2.1
Themekraft » Buddyforms » Version: 2.1.0.1

cpe:2.3:a:themekraft:buddyforms:2.1.0.1
Themekraft » Buddyforms » Version: 2.1.0.2

cpe:2.3:a:themekraft:buddyforms:2.1.0.2
Themekraft » Buddyforms » Version: 2.1.1

cpe:2.3:a:themekraft:buddyforms:2.1.1
Themekraft » Buddyforms » Version: 2.1.1.1

cpe:2.3:a:themekraft:buddyforms:2.1.1.1
Themekraft » Buddyforms » Version: 2.1.1.2

cpe:2.3:a:themekraft:buddyforms:2.1.1.2
Themekraft » Buddyforms » Version: 2.1.2

cpe:2.3:a:themekraft:buddyforms:2.1.2
Themekraft » Buddyforms » Version: 2.1.2.1

cpe:2.3:a:themekraft:buddyforms:2.1.2.1
Themekraft » Buddyforms » Version: 2.1.2.2

cpe:2.3:a:themekraft:buddyforms:2.1.2.2
Themekraft » Buddyforms » Version: 2.1.2.3

cpe:2.3:a:themekraft:buddyforms:2.1.2.3
Themekraft » Buddyforms » Version: 2.1.3

cpe:2.3:a:themekraft:buddyforms:2.1.3
Themekraft » Buddyforms » Version: 2.1.3.1

cpe:2.3:a:themekraft:buddyforms:2.1.3.1
Themekraft » Buddyforms » Version: 2.1.4

cpe:2.3:a:themekraft:buddyforms:2.1.4
Themekraft » Buddyforms » Version: 2.1.5

cpe:2.3:a:themekraft:buddyforms:2.1.5
Themekraft » Buddyforms » Version: 2.1.5.1

cpe:2.3:a:themekraft:buddyforms:2.1.5.1
Themekraft » Buddyforms » Version: 2.1.5.2

cpe:2.3:a:themekraft:buddyforms:2.1.5.2
Themekraft » Buddyforms » Version: 2.1.6

cpe:2.3:a:themekraft:buddyforms:2.1.6
Themekraft » Buddyforms » Version: 2.1.6.1

cpe:2.3:a:themekraft:buddyforms:2.1.6.1
Themekraft » Buddyforms » Version: 2.1.6.2

cpe:2.3:a:themekraft:buddyforms:2.1.6.2
Themekraft » Buddyforms » Version: 2.1.6.3

cpe:2.3:a:themekraft:buddyforms:2.1.6.3
Themekraft » Buddyforms » Version: 2.1.6.4

cpe:2.3:a:themekraft:buddyforms:2.1.6.4
Themekraft » Buddyforms » Version: 2.1.6.5

cpe:2.3:a:themekraft:buddyforms:2.1.6.5
Themekraft » Buddyforms » Version: 2.1.6.6

cpe:2.3:a:themekraft:buddyforms:2.1.6.6
Themekraft » Buddyforms » Version: 2.1.6.7

cpe:2.3:a:themekraft:buddyforms:2.1.6.7
Themekraft » Buddyforms » Version: 2.1.6.8

cpe:2.3:a:themekraft:buddyforms:2.1.6.8
Themekraft » Buddyforms » Version: 2.1.7

cpe:2.3:a:themekraft:buddyforms:2.1.7
Themekraft » Buddyforms » Version: 2.2

cpe:2.3:a:themekraft:buddyforms:2.2
Themekraft » Buddyforms » Version: 2.2.1

cpe:2.3:a:themekraft:buddyforms:2.2.1
Themekraft » Buddyforms » Version: 2.2.2

cpe:2.3:a:themekraft:buddyforms:2.2.2
Themekraft » Buddyforms » Version: 2.2.3

cpe:2.3:a:themekraft:buddyforms:2.2.3
Themekraft » Buddyforms » Version: 2.2.4

cpe:2.3:a:themekraft:buddyforms:2.2.4
Themekraft » Buddyforms » Version: 2.2.5

cpe:2.3:a:themekraft:buddyforms:2.2.5
Themekraft » Buddyforms » Version: 2.2.6

cpe:2.3:a:themekraft:buddyforms:2.2.6
Themekraft » Buddyforms » Version: 2.2.7

cpe:2.3:a:themekraft:buddyforms:2.2.7
Themekraft » Buddyforms » Version: 2.2.8

cpe:2.3:a:themekraft:buddyforms:2.2.8
Themekraft » Buddyforms » Version: 2.2.9

cpe:2.3:a:themekraft:buddyforms:2.2.9
Themekraft » Buddyforms » Version: 2.2.9.1

cpe:2.3:a:themekraft:buddyforms:2.2.9.1
Themekraft » Buddyforms » Version: 2.2.9.2

cpe:2.3:a:themekraft:buddyforms:2.2.9.2
Themekraft » Buddyforms » Version: 2.3

cpe:2.3:a:themekraft:buddyforms:2.3
Themekraft » Buddyforms » Version: 2.3.1

cpe:2.3:a:themekraft:buddyforms:2.3.1
Themekraft » Buddyforms » Version: 2.3.2

cpe:2.3:a:themekraft:buddyforms:2.3.2
Themekraft » Buddyforms » Version: 2.3.3

cpe:2.3:a:themekraft:buddyforms:2.3.3
Themekraft » Buddyforms » Version: 2.3.3.1

cpe:2.3:a:themekraft:buddyforms:2.3.3.1
Themekraft » Buddyforms » Version: 2.3.3.2

cpe:2.3:a:themekraft:buddyforms:2.3.3.2
Themekraft » Buddyforms » Version: 2.4.0

cpe:2.3:a:themekraft:buddyforms:2.4.0
Themekraft » Buddyforms » Version: 2.4.1

cpe:2.3:a:themekraft:buddyforms:2.4.1
Themekraft » Buddyforms » Version: 2.4.2

cpe:2.3:a:themekraft:buddyforms:2.4.2
Themekraft » Buddyforms » Version: 2.4.3

cpe:2.3:a:themekraft:buddyforms:2.4.3
Themekraft » Buddyforms » Version: 2.4.4

cpe:2.3:a:themekraft:buddyforms:2.4.4
Themekraft » Buddyforms » Version: 2.4.5

cpe:2.3:a:themekraft:buddyforms:2.4.5
Themekraft » Buddyforms » Version: 2.4.6

cpe:2.3:a:themekraft:buddyforms:2.4.6
Themekraft » Buddyforms » Version: 2.5.0

cpe:2.3:a:themekraft:buddyforms:2.5.0
Themekraft » Buddyforms » Version: 2.5.1

cpe:2.3:a:themekraft:buddyforms:2.5.1
Themekraft » Buddyforms » Version: 2.5.10

cpe:2.3:a:themekraft:buddyforms:2.5.10
Themekraft » Buddyforms » Version: 2.5.11

cpe:2.3:a:themekraft:buddyforms:2.5.11
Themekraft » Buddyforms » Version: 2.5.12

cpe:2.3:a:themekraft:buddyforms:2.5.12
Themekraft » Buddyforms » Version: 2.5.13

cpe:2.3:a:themekraft:buddyforms:2.5.13
Themekraft » Buddyforms » Version: 2.5.14

cpe:2.3:a:themekraft:buddyforms:2.5.14
Themekraft » Buddyforms » Version: 2.5.15

cpe:2.3:a:themekraft:buddyforms:2.5.15
Themekraft » Buddyforms » Version: 2.5.16

cpe:2.3:a:themekraft:buddyforms:2.5.16
Themekraft » Buddyforms » Version: 2.5.17

cpe:2.3:a:themekraft:buddyforms:2.5.17
Themekraft » Buddyforms » Version: 2.5.18

cpe:2.3:a:themekraft:buddyforms:2.5.18
Themekraft » Buddyforms » Version: 2.5.19

cpe:2.3:a:themekraft:buddyforms:2.5.19
Themekraft » Buddyforms » Version: 2.5.2

cpe:2.3:a:themekraft:buddyforms:2.5.2
Themekraft » Buddyforms » Version: 2.5.21

cpe:2.3:a:themekraft:buddyforms:2.5.21
Themekraft » Buddyforms » Version: 2.5.22

cpe:2.3:a:themekraft:buddyforms:2.5.22
Themekraft » Buddyforms » Version: 2.5.25

cpe:2.3:a:themekraft:buddyforms:2.5.25
Themekraft » Buddyforms » Version: 2.5.26

cpe:2.3:a:themekraft:buddyforms:2.5.26
Themekraft » Buddyforms » Version: 2.5.27

cpe:2.3:a:themekraft:buddyforms:2.5.27
Themekraft » Buddyforms » Version: 2.5.28

cpe:2.3:a:themekraft:buddyforms:2.5.28
Themekraft » Buddyforms » Version: 2.5.29

cpe:2.3:a:themekraft:buddyforms:2.5.29
Themekraft » Buddyforms » Version: 2.5.3

cpe:2.3:a:themekraft:buddyforms:2.5.3
Themekraft » Buddyforms » Version: 2.5.30

cpe:2.3:a:themekraft:buddyforms:2.5.30
Themekraft » Buddyforms » Version: 2.5.31

cpe:2.3:a:themekraft:buddyforms:2.5.31
Themekraft » Buddyforms » Version: 2.5.32

cpe:2.3:a:themekraft:buddyforms:2.5.32
Themekraft » Buddyforms » Version: 2.5.4

cpe:2.3:a:themekraft:buddyforms:2.5.4
Themekraft » Buddyforms » Version: 2.5.5

cpe:2.3:a:themekraft:buddyforms:2.5.5
Themekraft » Buddyforms » Version: 2.5.6

cpe:2.3:a:themekraft:buddyforms:2.5.6
Themekraft » Buddyforms » Version: 2.5.7

cpe:2.3:a:themekraft:buddyforms:2.5.7
Themekraft » Buddyforms » Version: 2.5.8

cpe:2.3:a:themekraft:buddyforms:2.5.8
Themekraft » Buddyforms » Version: 2.5.9

cpe:2.3:a:themekraft:buddyforms:2.5.9
Themekraft » Buddyforms » Version: 2.6.0

cpe:2.3:a:themekraft:buddyforms:2.6.0
Themekraft » Buddyforms » Version: 2.6.1

cpe:2.3:a:themekraft:buddyforms:2.6.1
Themekraft » Buddyforms » Version: 2.6.10

cpe:2.3:a:themekraft:buddyforms:2.6.10
Themekraft » Buddyforms » Version: 2.6.11

cpe:2.3:a:themekraft:buddyforms:2.6.11
Themekraft » Buddyforms » Version: 2.6.12

cpe:2.3:a:themekraft:buddyforms:2.6.12
Themekraft » Buddyforms » Version: 2.6.13

cpe:2.3:a:themekraft:buddyforms:2.6.13
Themekraft » Buddyforms » Version: 2.6.14

cpe:2.3:a:themekraft:buddyforms:2.6.14
Themekraft » Buddyforms » Version: 2.6.15

cpe:2.3:a:themekraft:buddyforms:2.6.15
Themekraft » Buddyforms » Version: 2.6.2

cpe:2.3:a:themekraft:buddyforms:2.6.2
Themekraft » Buddyforms » Version: 2.6.3

cpe:2.3:a:themekraft:buddyforms:2.6.3
Themekraft » Buddyforms » Version: 2.6.4

cpe:2.3:a:themekraft:buddyforms:2.6.4
Themekraft » Buddyforms » Version: 2.6.5

cpe:2.3:a:themekraft:buddyforms:2.6.5
Themekraft » Buddyforms » Version: 2.6.6

cpe:2.3:a:themekraft:buddyforms:2.6.6
Themekraft » Buddyforms » Version: 2.6.8

cpe:2.3:a:themekraft:buddyforms:2.6.8
Themekraft » Buddyforms » Version: 2.6.9

cpe:2.3:a:themekraft:buddyforms:2.6.9
Themekraft » Buddyforms » Version: 2.7.0

cpe:2.3:a:themekraft:buddyforms:2.7.0
Themekraft » Buddyforms » Version: 2.7.1

cpe:2.3:a:themekraft:buddyforms:2.7.1
Themekraft » Buddyforms » Version: 2.7.2

cpe:2.3:a:themekraft:buddyforms:2.7.2
Themekraft » Buddyforms » Version: 2.7.3

cpe:2.3:a:themekraft:buddyforms:2.7.3
Themekraft » Buddyforms » Version: 2.7.4

cpe:2.3:a:themekraft:buddyforms:2.7.4
Themekraft » Buddyforms » Version: 2.7.5

cpe:2.3:a:themekraft:buddyforms:2.7.5
Themekraft » Buddyforms » Version: 2.7.6

cpe:2.3:a:themekraft:buddyforms:2.7.6
Themekraft » Buddyforms » Version: 2.7.7

cpe:2.3:a:themekraft:buddyforms:2.7.7
Themekraft » Buddyforms » Version: 2.7.8

cpe:2.3:a:themekraft:buddyforms:2.7.8
Themekraft » Buddyforms » Version: 2.7.9

cpe:2.3:a:themekraft:buddyforms:2.7.9
Themekraft » Buddyforms » Version: 2.8.1

cpe:2.3:a:themekraft:buddyforms:2.8.1
Themekraft » Buddyforms » Version: 2.8.10

cpe:2.3:a:themekraft:buddyforms:2.8.10
Themekraft » Buddyforms » Version: 2.8.11

cpe:2.3:a:themekraft:buddyforms:2.8.11
Themekraft » Buddyforms » Version: 2.8.12

cpe:2.3:a:themekraft:buddyforms:2.8.12
Themekraft » Buddyforms » Version: 2.8.13

cpe:2.3:a:themekraft:buddyforms:2.8.13
Themekraft » Buddyforms » Version: 2.8.14

cpe:2.3:a:themekraft:buddyforms:2.8.14
Themekraft » Buddyforms » Version: 2.8.15

cpe:2.3:a:themekraft:buddyforms:2.8.15
Themekraft » Buddyforms » Version: 2.8.2

cpe:2.3:a:themekraft:buddyforms:2.8.2
Themekraft » Buddyforms » Version: 2.8.3

cpe:2.3:a:themekraft:buddyforms:2.8.3
Themekraft » Buddyforms » Version: 2.8.4

cpe:2.3:a:themekraft:buddyforms:2.8.4
Themekraft » Buddyforms » Version: 2.8.5

cpe:2.3:a:themekraft:buddyforms:2.8.5
Themekraft » Buddyforms » Version: 2.8.6

cpe:2.3:a:themekraft:buddyforms:2.8.6
Themekraft » Buddyforms » Version: 2.8.7

cpe:2.3:a:themekraft:buddyforms:2.8.7
Themekraft » Buddyforms » Version: 2.8.8

cpe:2.3:a:themekraft:buddyforms:2.8.8
Themekraft » Buddyforms » Version: 2.8.9

cpe:2.3:a:themekraft:buddyforms:2.8.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-12038

Products

Pricing

Contact Us