CVE-2019-5920

概要

参考情報

• jvn.jp/en/jp/JVN83501605/index.html · Third Party Advisory
• wordpress.org/plugins/formcraft-form-builder · Release Notes
• wpvulndb.com/vulnerabilities/9231 · Third Party Advisory

formcraft のその他の脆弱性

• CVE-2025-0817中 6.1The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3…
• CVE-2024-13783中 4.3The FormCraft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in formcraft-main.php in a…
• CVE-2023-2592高 7.2The FormCraft WordPress plugin before 3.9.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to…
• CVE-2023-22717中 5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in nCrafts FormCraft plugin <= 1.2.6 versions.
• CVE-2022-1647中 4.8The FormCraft WordPress plugin before 1.2.6 does not sanitise and escape Field Labels, allowing high privilege users such as admin to perfor…