← Back to CVE List

CVE-2023-3134

Published: 2023-07-31T10:15Z
Last Modified: 2024-11-21T08:16Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt