xss vulnerability

This support ticket is created 4 years, 9 months ago. There's a good chance that you are reading advice that it now obsolete.

This is the technical support forum for Toolset - a suite of plugins for developing WordPress sites without writing PHP.

Everyone can read this forum, but only Toolset clients can post in it. Toolset support works 6 days per week, 19 hours per day.

Sun	Mon	Tue	Wed	Thu	Fri	Sat
-	10:00 – 13:00	10:00 – 13:00	10:00 – 13:00	10:00 – 13:00	10:00 – 13:00	-
-	14:00 – 18:00	14:00 – 18:00	14:00 – 18:00	14:00 – 18:00	14:00 – 18:00	-

Supporter timezone: Asia/Kolkata (GMT+05:30)

This topic contains 1 reply, has 2 voices.

Assisted by: Minesh.

Author

Posts

March 9, 2020 at 11:05 am #1544239

troyC

Our site has been audited by a security company. xss vulnerabilities seem to occur on the /contact and /retour page within the CRED form.

Can you provide insights or an update on how to get these problems resolved?

March 9, 2020 at 11:20 am #1544289

Minesh

Supporter

Languages: English (English )

Timezone: Asia/Kolkata (GMT+05:30)

Hello. Thank you for contacting the Toolset support.

I see the page: hidden link and I see there is a captcha already available with the form.

Can you please share more details, what needs to be fixed and how xss vulnerabilities are possible?