CVE-2023-51695: WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPEverest Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease! allows Stored XSS.This issue affects Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease!: from n/a through 2.0.4.1.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51695?
CVE-2023-51695 is classified as a high severity vulnerability due to its potential for Stored XSS attacks.
How do I fix CVE-2023-51695?
To fix CVE-2023-51695, update the Everest Forms plugin to version 2.0.4.2 or later.
What types of attacks can CVE-2023-51695 lead to?
CVE-2023-51695 can lead to Stored XSS attacks, allowing attackers to inject malicious scripts into web pages.
Which software versions are affected by CVE-2023-51695?
CVE-2023-51695 affects Everest Forms versions up to and including 2.0.4.1.
Is user data at risk due to CVE-2023-51695?
Yes, CVE-2023-51695 poses a risk to user data as it can be exploited to manipulate user interactions on affected pages.