What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-2324.

What is the affected software?

The affected software is the Elementor Forms Google Sheet Connector WordPress plugin before version 1.0.7 and the gsheetconnector-for-elementor-forms-pro WordPress plugin through version 1.0.7.

What is the severity of CVE-2023-2324?

The severity of CVE-2023-2324 is medium with a CVSS score of 6.1.

What is the CWE category for this vulnerability?

The CWE category for this vulnerability is CWE-79.

How can I fix CVE-2023-2324?

To fix CVE-2023-2324, you should update the Elementor Forms Google Sheet Connector WordPress plugin to version 1.0.7 or higher, or the gsheetconnector-for-elementor-forms-pro WordPress plugin to version 1.0.7 or higher.

Vulnerability/
CVE-2023-2324

medium

6.1

CWE

4/7/2023

21/11/2024

CVE-2023-2324: Elementor Forms Google Sheet Connector < 1.0.7 - Reflected XSS

First published: Tue Jul 04 2023(Updated: )

The Elementor Forms Google Sheet Connector WordPress plugin before 1.0.7, gsheetconnector-for-elementor-forms-pro WordPress plugin through 1.0.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Credit: contact@wpscan.com

Affected Software	Affected Version	How to fix
Gsheetconnector for Forminator Forms WordPress	<1.0.7
Gsheetconnector for Forminator Forms WordPress	<=1.0.7

Never miss a vulnerability like this again

Reference Links

https://wpscan.com/vulnerability/50d81eec-f324-4445-b10f-96e94153917e

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-2324.
What is the affected software?
The affected software is the Elementor Forms Google Sheet Connector WordPress plugin before version 1.0.7 and the gsheetconnector-for-elementor-forms-pro WordPress plugin through version 1.0.7.
What is the severity of CVE-2023-2324?
The severity of CVE-2023-2324 is medium with a CVSS score of 6.1.
What is the CWE category for this vulnerability?
The CWE category for this vulnerability is CWE-79.
How can I fix CVE-2023-2324?
To fix CVE-2023-2324, you should update the Elementor Forms Google Sheet Connector WordPress plugin to version 1.0.7 or higher, or the gsheetconnector-for-elementor-forms-pro WordPress plugin to version 1.0.7 or higher.

agent/softwarecombine
agent/type
agent/references
agent/title
agent/severity
agent/weakness
agent/author
agent/description
agent/first-publish-date
agent/event
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/gsheetconnector
canonical/gsheetconnector for forminator forms wordpress
version/gsheetconnector for forminator forms wordpress/1.0.7

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.