CVE-2021-24596

4.8 mediumEPSS 2.8%

Medium (4.8) in itservicejung youforms-free-for-copecart. EPSS 2.8% chance of exploitation in the next 30 days.

The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowing high privilege users (editors and admins) to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-09-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

itservicejung:youforms-free-for-copecart

References

https://wpscan.com/vulnerability/b5def0e7-2b4a-43e0-8175-28b28aa2f8ae
https://wpscan.com/vulnerability/b5def0e7-2b4a-43e0-8175-28b28aa2f8ae

Check your stack JSON