Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-38971

WordPress BuddyForms Plugin <= 2.7.5 is vulnerable to Cross Site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin <= 2.7.5 versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions

Default version status: unaffected

  • n/a to ≤ 2.7.5affected

References