Description

The Wise Forms WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks via malicious form submissions.

INFO

Published Date :

2025-02-17T06:00:01.478Z

Last Modified :

2025-02-19T14:07:16.133Z

Source :

WPScan
AFFECTED PRODUCTS

The following products are affected by CVE-2024-13603 vulnerability.

Vendors Products
Kainex
  • Wise Forms
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-13603.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact