VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Feb 28, 2022· Updated Jun 17, 2026

CVE-2022-23988

CVE-2022-23988

Description

The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape submitted form data, allowing unauthenticated attacker to submit XSS payloads which will get executed when a privileged user will view the related submission

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Westguardsolutions/Ws Form2 versions
    cpe:2.3:a:westguardsolutions:ws_form:*:*:*:*:lite:wordpress:*:*+ 1 more
    • cpe:2.3:a:westguardsolutions:ws_form:*:*:*:*:lite:wordpress:*:*range: <1.8.176
    • cpe:2.3:a:westguardsolutions:ws_form:*:*:*:*:pro:wordpress:*:*range: <1.8.176
  • WordPress/WS Form Prollm-create
    Range: <1.8.176
  • WordPress/WS Form LITEllm-fuzzy
    Range: <1.8.176
  • WS Form/WS Form LITE – Drag & Drop Contact Form Builder for WordPressv5
    Range: 1.8.176
  • WS Form/WS Form Prov5
    Range: 1.8.176

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.