medium6.5
CVE-2022-24982
Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to access the cleartext credentials of all other form users.
Impact
Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to access the cleartext credentials of all other form users. admin.php contains a hidden base64-encoded string with these credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jqueryform | Jqueryform | before 2022-02-05 |