CVE-2024-25934

MEDIUM 5.4CVE-2024-25934 · Published 15/03/2024 · updated 17/06/2026

In short

CVE-2024-25934 is a MEDIUM (CVSS 5.4) vulnerability affecting formfacade (formfacade).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 24.8% of all vulnerabilities.
Fix: update to 1.2.2 or later.

Package	Affected versions	Patched versions
formfacade formfacade	`< 1.2.2`	`1.2.2`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FormFacade allows Stored XSS.This issue affects FormFacade: from n/a through 1.0.0.

References

patchstack.com/database/vulnerability/formfacade/wordpress-formfacade-plugin-1-0-0-cross-site-scripting-xss-vulnerability · Third Party Advisory

More vulnerabilities in formfacade

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free