Record summary

CVE-2024-31857 has a selected CVSS score of 5.4 (medium).

Description

Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote attacker may obtain user information etc. and alter the page contents on the user's web browser.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 23, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion rangeStatus
CVE Listprior to 1.15.4affected

Default status: unknown

CVE List*affected

References

4