CVEs-PoC/2017/CVE-2017-20194.md

CVE-2017-20194

Description

The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frm_forms_preview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form.

POC

Reference

• https://klikki.fi/formidable-forms-vulnerabilities/

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/cyb3r-w0lf/nuclei-template-collection