Flo Forms – Easy Drag & Drop Form Builder vulnerabilities
1 known vulnerability in Flo Forms – Easy Drag & Drop Form Builder from Flothemesplugins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest first
- 7.1 High severity
Flo Forms – Easy Drag & Drop Form Builder: Improper Neutralization of Input During Web Page Generation
The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up to, and including, 1.0.43. This is due to the plugin allowing SVG file uploads via an unauthenticated AJAX e