Threats tagged 'ghsa-353x-4wxr-qqh7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2025-13159The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via High7.12025-11-21GCVE DatabaseCVE-2025-13159 The Flo Forms WordPress plugin up to version 1.0.43 is vulnerable to stored cross-site scripting (XSS) via SVG file uploads. An unauthenticated AJAX endpoint allows attackers to upload malicious SVG files containing JavaScript. When an administrator views these files in the WordPress admin interface, the script executes, potentially leading to full site compromise. Report on CVE-2025-13159 Vulnerability CWE-79 #ghsa-353x-4wxr-qqh7	GCVE Database	2025-11-21

Page 1 of 1