Vulnerabilities > CVE-2023-3134 - Unspecified vulnerability in Incsub Forminator

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
incsub

Summary

The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks.

Vulnerable Configurations

Part Description Count
Application
Incsub
285