CyberRota Analysis
AI analysis pending.
CVE
CVE-2022-1564
Severity
MEDIUM
CVSS
4.8
EPSS
1.02%
WordPress
Original NVD Description
The Form Maker by 10Web WordPress plugin before 1.14.12 does not sanitize and escape the Custom Text settings, which could allow high privilege user such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed