CVE-2023-45071: WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)
Published Oct 18, 2023
·Updated
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18 versions.
Affected Software
1 affected component
10web Form Maker Wordpress<1.15.19
Remediation
Information
Update to 1.15.19 or a higher version.
Event History
Oct 18, 2023
CVE Published
via MITRE·12:38 PM
Data Sourced
via MITRE·12:38 PM
RemedyDescriptionSeverityWeakness
Data Sourced
01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-45071?
CVE-2023-45071 is an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in the 10Web Form Builder Team Form Maker plugin for WordPress.
2
How severe is CVE-2023-45071?
CVE-2023-45071 has a severity rating of 7.1 (high).
3
Which versions of the 10Web Form Builder Team Form Maker plugin are affected?
The vulnerability affects 10Web Form Builder Team Form Maker plugin versions up to and including 1.15.18.
4
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-45071?
The CWE ID associated with CVE-2023-45071 is CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
5
How can I fix the CVE-2023-45071 vulnerability?
To fix the CVE-2023-45071 vulnerability, update the 10Web Form Builder Team Form Maker plugin to version 1.15.19 or higher.