CVE-2021-24505

MEDIO 5.4CVE-2021-24505 · Published 09/08/2021 · updated 17/06/2026

En resumen

CVE-2021-24505 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a forms (madeit).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.62%, mayor que el 50.0% de las vulnerabilidades.
Solución: actualizar a 1.12.3 o posterior.

Package	Affected versions	Patched versions
forms madeit	`< 1.12.3`	`1.12.3`

Description

The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the Forms "Add new" field.

References

wpscan.com/vulnerability/550e08ac-4c3a-4e22-8e98-bc5bfc020ca9 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free