← Database

CVE-2024-7691

MEDIUM CVSS: 6.1 Published: 2024-09-02 Modified: 2026-06-17

Description

The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against administrators.

Affected Platforms

Projectcaruso Flaming Forms

Weakness Type

CWE-79, CWE-79

References