← All advisories

Medium severity6.5NVD Advisory· Published May 15, 2023· Updated Jun 17, 2026

CVE-2023-22717

CVE-2023-22717

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in nCrafts FormCraft plugin <= 1.2.6 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Ncrafts/Formcraft2 versions
cpe:2.3:a:ncrafts:formcraft:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:ncrafts:formcraft:*:*:*:*:*:wordpress:*:*range: <=1.2.6
- (no CPE)range: n/a
WordPress/Formcraftllm-fuzzy
Range: <=1.2.6

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/formcraft-form-builder/wordpress-formcraft-contact-form-builder-for-wordpress-plugin-1-2-6-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.