Skip to content
Threat Feed
Subscribe

Product

Kali Forms — Contact Form & Drag-and-Drop Builder (<= 2.4.20)

1 brief RSS
high advisory

Remote Code Execution in Kali Forms WordPress Plugin

Unauthenticated attackers can achieve remote code execution in Kali Forms versions up to 2.4.20 by exploiting insufficient validation of the thisPermalink field within the _save_data function.

Kali Forms — Contact Form & Drag-and-Drop Builder web-vulnerability wordpress rce
1r 2t 1c