Threats tagged 'ghsa-p2mv-xr7j-g3mm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-105413The Form Maker by 10Web WordPress plugin before 1.15.51 does not consistently escape user-submitted field values High2026-11-04GCVE DatabaseCVE-2026-105413 The Form Maker by 10Web WordPress plugin versions before 1.15.51 improperly handle user-submitted field values by not consistently escaping them before rendering on the submissions admin page. This flaw allows unauthenticated users to store payloads that execute arbitrary web scripts in the session of an administrator who views the submissions. Report on CVE-2026-105413 Vulnerability #ghsa-p2mv-xr7j-g3mm	GCVE Database	2026-11-04

Page 1 of 1