← Back to CVE List

CVE-2017-18600

Published: 2019-09-10T12:15Z
Last Modified: 2024-11-21T03:20Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form > Heading > Heading Text" field. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt