high7.2
CVE-2024-31077
Forminator prior to 1.29.3 contains a SQL injection vulnerability.
Impact
Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege may obtain and alter any information in the database and cause a denial-of-service (DoS) condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Incsub | Forminator | before 1.29.3 |