CVE-2023-3134

MEDIUM · CVSS 6.1 EPSS 4.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-07-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-3134

Severity

MEDIUM

CVSS

6.1

EPSS

4.09%

WordPress

Original NVD Description

The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks.