CVE-2021-24608: STRATEGY11 Formidable Form Builder

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress plugin before 5.0.07 does not sanitise and escape its Form's Labels, allowing high privileged users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Affected products

• STRATEGY11 Formidable Form Builder: before 5.0.07 (fixed in 5.0.07)

Published 2021-10-25. Last modified 2026-06-17.