CVE-2024-32534: WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability
Published Apr 17, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.23.
Affected Software
3 affected components
10web Form Maker<=1.15.23
WordPress Form Maker<=1.15.23
10web Form Maker Wordpress<1.15.24
Remediation
Information
Update to 1.15.24 or a higher version.
Event History
Apr 17, 2024
CVE Published
via MITRE·08:44 AM
Data Sourced
via MITRE·08:44 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-32534?
CVE-2024-32534 is classified as a medium severity Stored XSS vulnerability that can impact users of Form Maker by 10Web.
2
How do I fix CVE-2024-32534?
To remediate CVE-2024-32534, update Form Maker by 10Web to the latest version beyond 1.15.23.
3
What versions of the software are affected by CVE-2024-32534?
CVE-2024-32534 affects Form Maker by 10Web up to version 1.15.23.
4
Is CVE-2024-32534 a critical vulnerability?
CVE-2024-32534 is not considered critical, but it poses security risks due to potential XSS attacks.
5
Can CVE-2024-32534 be exploited by attackers?
Yes, CVE-2024-32534 can be exploited by attackers to execute malicious scripts on users' browsers.