Threats tagged 'ghsa-wjw5-6qh2-ph2r'

A stored cross-site scripting (XSS) vulnerability exists in 10Web Form Maker versions up to 1.15.50. This vulnerability arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts that can execute in the context of other users. The vulnerability has a CVSS 3.1 score of 7.1, indicating high severity with network attack vector, low attack complexity, no privileges required, and user interaction needed. It impacts confidentiality, integrity, and availability with low to high impact levels. No patch or remediation information is currently provided.