Devsabbirahmed

devsabbirahmed

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Simple Form

simple_form

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-3113 1Devsabbirahmed 1Simple Form Jun 17, 2026 Jul 30, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 The FormFlow: WhatsApp Social and Advanced Form Builder with Easy Lead Collection WordPress plugin before 2.12.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to...Show more The FormFlow: WhatsApp Social and Advanced Form Builder with Easy Lead Collection WordPress plugin before 2.12.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2024-3113

1Devsabbirahmed

1Simple Form

Jun 17, 2026

Jul 30, 2024

N/A· v4

5.9 MEDIUM· v3

N/A· v2

The FormFlow: WhatsApp Social and Advanced Form Builder with Easy Lead Collection WordPress plugin before 2.12.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less