CVE-2024-0427

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions.

CVSS v3.1

6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

EPSS

0.36% chance of exploitation in the next 30 days, 29th percentile

Published

2024-06-12

Updated

2024-08-01

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/1806fef3-d774-46e0-aa48-7a101495f4eb/

References

• CVE Record
• NVD entry

Related

• CVE-2024-0426
• CVE-2024-0459
• CVE-2024-0425
• CVE-2024-0460
• CVE-2024-0424
• CVE-2024-0461