Vulnerabilities > CVE-2022-0830 - Unspecified vulnerability in Formbuilder Project Formbuilder

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

formbuilder-project

NVD

Published: 2022-04-04

Updated: 2024-11-21

Summary

The FormBuilder WordPress plugin through 1.08 does not have CSRF checks in place when creating/updating and deleting forms, and does not sanitise as well as escape its form field values. As a result, attackers could make logged in admin update and delete arbitrary forms via a CSRF attack, and put Cross-Site Scripting payloads in them.

Vulnerable Configurations

Part	Description	Count
Application	Formbuilder_Project Formbuilder Project Formbuilder 0.9.1 Formbuilder Project Formbuilder 0.81 Formbuilder Project Formbuilder 0.82 Formbuilder Project Formbuilder 0.84 Formbuilder Project Formbuilder 0.85 Formbuilder Project Formbuilder 0.89 Formbuilder Project Formbuilder 0.90 Formbuilder Project Formbuilder 0.91 Formbuilder Project Formbuilder 0.92 Formbuilder Project Formbuilder 0.93 Formbuilder Project Formbuilder 0.851 Formbuilder Project Formbuilder 0.852 Formbuilder Project Formbuilder 0.860 Formbuilder Project Formbuilder 0.870 Formbuilder Project Formbuilder 0.880 Formbuilder Project Formbuilder 0.881 Formbuilder Project Formbuilder 0.891 Formbuilder Project Formbuilder 0.892 Formbuilder Project Formbuilder 1.00 Formbuilder Project Formbuilder 1.03 Formbuilder Project Formbuilder 1.04 Formbuilder Project Formbuilder 1.05 Formbuilder Project Formbuilder 1.06 Formbuilder Project Formbuilder 1.07 Formbuilder Project Formbuilder 1.08	25

Summary

Vulnerable Configurations

References