Vulnerabilities > WEB Settler

DATE CVE VULNERABILITY TITLE RISK
2021-09-06 CVE-2021-24513 Cross-site Scripting vulnerability in Web-Settler Form Builder
The Form Builder | Create Responsive Contact Forms WordPress plugin before 1.9.8.4 does not sanitise or escape its Form Title, allowing high privilege users such as admin to set Cross-Site Scripting payload in them, even when the unfiltered_html capability is disallowed
network
low complexity
web-settler CWE-79
5.4