Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin cformsII HTML Injection - CVE-2019-15238 - Vulnerability Database
WP Plugin Cforms2

WordPress Plugin cformsII HTML Injection - CVE-2019-15238

Medium
Reference: CVE-2019-15238
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-15238
Title: WordPress Plugin cformsII HTML Injection
Overview:

WordPress Plugin cformsII is prone to an HTML injection vulnerability because it fails to properly sanitize user-supplied input. Attacker supplied HTML and script code would run in the context of the affected browser potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user other attacks are also possible. WordPress Plugin cformsII version 15.0.1 is vulnerable prior versions may also be affected.