CVE-2016-10215

MEDIUM 6.1CVE-2016-10215 · Published 10/02/2017 · updated 17/06/2026

In short

CVE-2016-10215 is a MEDIUM (CVSS 6.1) vulnerability affecting bigtree-form-builder (fastspot).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 56.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bigtree-form-builder fastspot	`≤ 1.1`	No fix yet

Description

An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP POST parameters passed to a "site/index.php/../../extensions/com.fastspot.form-builder/ajax/redraw-field.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

References

Fastspot/bigtree-form-builder commit 06fde0c · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free