2 lines
3.5 KiB
JSON
2 lines
3.5 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder","vendor":"techjewel","versions":[{"lessThanOrEqual":"6.1.14","status":"affected","version":"0","versionType":"semver"}]}],"source":"security@wordfence.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AI Form Builder module in all versions up to, and including, 6.1.14 due to a combination of missing authorization checks, a leaked nonce, and insufficient input sanitization. The vulnerability allows Subscriber-level users to trigger AI form generation via a protected endpoint. When prompted, AI services will typically return bare JavaScript code (without <script> tags), which bypasses the plugin's sanitization. This stored JavaScript executes whenever anyone views the generated form, making it possible for authenticated attackers with Subscriber-level access and above to inject arbitrary web scripts that will execute in the context of any user accessing the form."},{"lang":"es","value":"El plugin Fluent Forms para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del módulo AI Form Builder en todas las versiones hasta la 6.1.14, inclusive, debido a una combinación de comprobaciones de autorización faltantes, un nonce filtrado y saneamiento de entrada insuficiente. La vulnerabilidad permite a usuarios de nivel Suscriptor activar la generación de formularios de IA a través de un endpoint protegido. Cuando se le solicita, los servicios de IA suelen devolver código JavaScript sin las etiquetas "}],"id":"CVE-2026-0996","lastModified":"2026-06-17T10:11:44.617","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":2.7,"source":"security@wordfence.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0996","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-02-10T15:39:54.764931Z","version":"2.0.3"}}]},"published":"2026-02-10T06:15:54.320","references":[{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/fluentform/tags/6.1.12/app/Hooks/actions.php#L641"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/fluentform/tags/6.1.12/app/Modules/Ai/AiFormBuilder.php#L29"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/fluentform/tags/6.1.12/app/Modules/Ai/AiFormBuilder.php#L334"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/browser/fluentform/tags/6.1.12/boot/globals.php#L438"},{"source":"security@wordfence.com","url":"https://plugins.trac.wordpress.org/changeset/3449710/fluentform/trunk/app/Hooks/actions.php"},{"source":"security@wordfence.com","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/00192a36-4b75-4dae-9a6e-0afb02ed5bad?source=cve"}],"sourceIdentifier":"security@wordfence.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@wordfence.com","type":"Secondary"}]}
|