jvn.jp
https://jvn.jp/en/jp/JVN50132400 CVE-2024-31857
MEDIUM
Record summary
CVE-2024-31857 has a selected CVSS score of 5.4 (medium).
Description
Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote attacker may obtain user information etc. and alter the page contents on the user's web browser.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 23, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
ForminatorBrowse WPMU DEV / Forminator | CVE List | prior to 1.15.4 | affected |
forminatorBrowse incsub / forminatorDefault status: unknown | CVE List | * | affected |
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-31857 wordpress.org
https://wordpress.org/plugins/forminator wpmudev.com
https://wpmudev.com/