CVE-2017-1000033
MEDIUMWordpress Plugin Vospari Forms < 1.4 - XSS
Title source: llmDescription
Wordpress Plugin Vospari Forms version < 1.4 is vulnerable to a reflected cross site scripting in the form submission resulting in javascript code execution in the context on the current user.
Scores
CVSS v3
6.1
EPSS
0.0245
EPSS Percentile
85.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (2)
vospari_forms_project/vospari_forms
< 1.3
n/a/n/a
Published
Jul 17, 2017
Tracked Since
Feb 18, 2026