Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Unknown | Flaming Forms | affected |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Fri, 04 Oct 2024 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-79 | |
| CPEs | cpe:2.3:a:projectcaruso:flaming_forms:*:*:*:*:*:wordpress:*:* |
Tue, 03 Sep 2024 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Projectcaruso
Projectcaruso flaming Forms |
|
| CPEs | cpe:2.3:a:projectcaruso:flaming_forms:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Projectcaruso
Projectcaruso flaming Forms |
|
| Metrics |
cvssV3_1
|
Mon, 02 Sep 2024 06:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. | |
| Title | Flaming Forms <= 1.0.1 - Reflected XSS | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2024-09-03T15:26:02.332Z
Reserved: 2024-08-12T00:26:27.181Z
Link: CVE-2024-7692
Vulnrichment
Updated: 2024-09-03T15:25:57.079Z
NVD
Status : Analyzed
Published: 2024-09-02T08:15:06.243
Modified: 2024-10-04T17:14:50.990
Link: CVE-2024-7692
Redhat
No data.
OpenCVE Enrichment
No data.