CVE-2016-10215

MEDIO 6.1CVE-2016-10215 · Published 10/02/2017 · updated 17/06/2026

In breve

CVE-2016-10215 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda bigtree-form-builder (fastspot).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.77%, superiore al 56.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
bigtree-form-builder fastspot	`≤ 1.1`	No fix yet

Description

An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP POST parameters passed to a "site/index.php/../../extensions/com.fastspot.form-builder/ajax/redraw-field.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

References

Fastspot/bigtree-form-builder commit 06fde0c · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free