medium6.1
CVE-2020-36919
WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter.
Impact
WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpforms | Wpforms | through 1.7.8 |