CVE-2024-31857

Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote attacker may obtain user information etc. and alter the page contents on the user's web browser.

• CWE-79

• https://jvn.jp/en/jp/JVN50132400/Third Party Advisory
• https://wordpress.org/plugins/forminator/Product
• https://wpmudev.com/Product
• https://jvn.jp/en/jp/JVN50132400/Third Party Advisory
• https://wordpress.org/plugins/forminator/Product
• https://wpmudev.com/Product

Published

Apr 23, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31850A path traversal vulnerability exists in the Java version of…8.6
• CVE-2024-31851A path traversal vulnerability exists in the Java version of…8.6
• CVE-2024-31852LLVM before 18.1.3 generates code in which the LR register c…5.9
• CVE-2024-31853A vulnerability has been identified in SICAM TOOLBOX II (All…8.1
• CVE-2024-31854A vulnerability has been identified in SICAM TOOLBOX II (All…8.1
• CVE-2024-31856An attacker with certain MQTT permissions can create malicio…8.8
• CVE-2024-31858Out-of-bounds write for some Intel(R) QuickAssist Technology…7.8
• CVE-2024-31859Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x…6.3
• CVE-2024-3186CWE-476 NULL Pointer Dereference vulnerability in the evalEx…5.3
• CVE-2024-31860Improper Input Validation vulnerability in Apache Zeppelin. …6.5
• CVE-2024-31861Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2024-31862Improper Input Validation vulnerability in Apache Zeppelin w…5.3