A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NWpforms Contact Form
APPWpforms< 1.5.9
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
XSS
CWE
Referencje
Powiązane podatności
CVE-2019-25145HIGH7.2ten sam produkt
The Contact Form & SMTP Plugin by PirateForms plugin for WordPress is vulnerable to HTML injection in the ‘pub...
CVE-2024-11273MEDIUM6.1ten sam produkt
The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise an...
CVE-2023-30500MEDIUM5.8ten sam produkt
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPForms WPForms Lite (wpforms-lite), WPForms WPF...
CVE-2022-3574CRITICAL9.8ten sam vendor
The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV...
CVE-2024-11205HIGH8.5ten sam vendor
The WPForms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit...