IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
4.7Medium

CVE-2022-38971WordPress BuddyForms Plugin <= 2.7.5 is vulnerable to Cross Site Scripting (XSS)

ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions Published: (3 years ago)

Description

Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin <= 2.7.5 versions.

Weakness (CWE): CWE-79

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions ≤ 2.7.5

References and patches

Recent CVEs in the same product — WordPress plugins & themes