CVE-2023-4950 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-4950 PUBLISHED CVSS 8.5 HIGH

The Interactive Contact Form and Multi Step Form Builder WordPress plugin before 3.4 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks

EPSS 0.55% · 67.7th percentile

Risk Scores

CVSS v4.0

8.5

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS Score

0.55%

67.7th percentile

Affected Products

Vendor	Product	Versions
Unknown	Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor	0, 0, 0
funnelforms	funnelforms	0, 0, 0

Timeline

Oct 16, 2023 CVE Published
Oct 17, 2023 EPSS Score
Oct 17, 2023 PoC Published
Nov 17, 2023 EPSS Score
Dec 17, 2023 EPSS Score
Feb 17, 2024 EPSS Score
Mar 18, 2024 EPSS Score
Apr 18, 2024 EPSS Score
May 19, 2024 EPSS Score
Jul 19, 2024 EPSS Score
Aug 19, 2024 EPSS Score
Sep 18, 2024 EPSS Score

References

Open in Interactive Console →