CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Strategy11 Form Builder Team Formidable Forms allows Code Injection.This issue affects Formidable Forms: from n/a through 6.7.
Explanation of Vulnerability in Simple Terms
Formidable Forms versions up to 6.7 contain an improper input validation vulnerability that allows attackers to inject malicious content into form submissions. An attacker with network access can craft a request to modify form data without authentication, potentially altering stored information or injecting scripts. Site administrators should update to a version newer than 6.7 to mitigate this risk.
What an attacker can do
Inject or modify form data and stored content without authentication.
Potential impact on your site
Form submissions may be altered or contain injected content; data integrity is at risk.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
