CVE-2017-20192 — Formidable Forms (WordPress) — Vulnerable Docker Lab

Reproducible Docker lab for CVE-2017-20192 (Formidable Forms < 2.05.03 stored XSS).

Quickstart

docker compose up -d --build

Target:

• http://127.0.0.1:18080

Validate (lab helper)

This helper script:

• submits a crafted entry unauthenticated
• logs in as WordPress admin
• fetches the Formidable admin entry view and checks for the stored marker

bash ./scripts/poc.sh

Stop / Cleanup

docker compose down -v