Lucene search
K

38 matches found

Patchstack
Patchstack
added 2026/04/29 2:41 p.m.2 views

WordPress Advanced Form Integration plugin <= 1.126.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Idan Vaknin in WordPress Plugin Advanced Form Integration versions = 1.126.12...

5.8AI score
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-55586

Malicious code in bioql PyPI...

7.6CVSS7.7AI score0.00139EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-53090

Malicious code in bioql PyPI...

5.9CVSS8.7AI score0.00137EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-40229

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00123EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:59 a.m.3 views

CVE-2024-56293

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nasir Ahmed Advanced Form Integration advanced-form-integration allows Stored XSS.This issue affects Advanced Form Integration: from n/a through = 1.95.0...

5.9CVSS7.2AI score0.00137EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:57 a.m.7 views

CVE-2024-43340

Cross-Site Request Forgery CSRF vulnerability in Nasirahmed Advanced Form Integration.This issue affects Advanced Form Integration: from n/a through 1.89.4...

4.3CVSS7AI score0.00123EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/03/25 6:58 a.m.1 views

WordPress AFI plugin < 1.100.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by aprilliar in WordPress Plugin Advanced Form Integration versions 1.100.0...

3.5CVSS6.1AI score0.00107EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2025/01/07 11:15 a.m.2 views

CVE-2024-56293

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nasir Ahmed Advanced Form Integration advanced-form-integration allows Stored XSS.This issue affects Advanced Form Integration: from n/a through = 1.95.0...

5.9CVSS0.00137EPSS
Exploits0References1
CVE
CVE
added 2025/01/07 10:49 a.m.32 views

CVE-2024-56293

CVE-2024-56293 affects AFI – The Easiest Integration Plugin (Advanced Form Integration) for WordPress. It is a Stored XSS via improper input neutralization during web page generation, affecting AFI versions up to 1.95.0. Root cause: insufficient sanitization of input. Remediation: patch released ...

5.9CVSS7.2AI score0.00137EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/07 10:49 a.m.13 views

CVE-2024-56293 WordPress AFI – The Easiest Integration Plugin <= 1.95.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nasir Ahmed Advanced Form Integration advanced-form-integration allows Stored XSS.This issue affects Advanced Form Integration: from n/a through = 1.95.0...

5.9CVSS0.00137EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 10:49 a.m.3 views

CVE-2024-56293 WordPress AFI – The Easiest Integration Plugin <= 1.95.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nasirahmed Advanced Form Integration allows Stored XSS.This issue affects Advanced Form Integration: from n/a through 1.95.0...

5.9CVSS6.8AI score0.00137EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.1 views

WordPress plugin Advanced Form Integration 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS7.6AI score0.00137EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.2 views

PT-2025-3256 · Unknown · Advanced Form Integration

Name of the Vulnerable Software and Affected Versions: Advanced Form Integration versions 1.95.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. Recommendations: For Advanc...

5.9CVSS9.3AI score0.00137EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/01/03 12:17 p.m.0 views

WordPress AFI – The Easiest Integration Plugin <= 1.95.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by b4orvn Patchstack Alliance in WordPress Plugin Advanced Form Integration versions = 1.95.0...

5.9CVSS6.1AI score0.00137EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/12 6:54 p.m.2 views

WordPress AFI – The Easiest Integration Plugin plugin <= 1.92.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Advanced Form Integration versions = 1.92.0...

6.1CVSS6.3AI score0.01641EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/12 12:0 a.m.8 views

WordPress Advanced Form Integration Plugin <= 1.92.0 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Form Integration Type Plugin Vulnerable versions = 1.92.0 Fixed in 1.92.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10877 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c8dcdef7d81d Credits Peter...

6.1CVSS5.6AI score0.01641EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2024/08/26 9:15 p.m.17 views

CVE-2024-43340

Cross-Site Request Forgery CSRF vulnerability in Nasirahmed Advanced Form Integration.This issue affects Advanced Form Integration: from n/a through 1.89.4...

4.3CVSS0.00123EPSS
Exploits0References1
OSV
OSV
added 2024/08/26 9:15 p.m.1 views

CVE-2024-43340

Cross-Site Request Forgery CSRF vulnerability in Nasirahmed Advanced Form Integration.This issue affects Advanced Form Integration: from n/a through 1.89.4...

4.3CVSS5.8AI score0.00123EPSS
Exploits0References1
CVE
CVE
added 2024/08/26 8:33 p.m.54 views

CVE-2024-43340

CVE-2024-43340 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Nasirahmed Advanced Form Integration (AFI) WordPress plugin. The entry covers AFI versions from 1.0 through 1.89.4 and indicates a CSRF weakness but does not specify the exact root cause or affected actions beyond t...

4.3CVSS7AI score0.00123EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/08/26 8:33 p.m.17 views

CVE-2024-43340 WordPress AFI – The Easiest Integration Plugin plugin <= 1.89.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Nasirahmed Advanced Form Integration.This issue affects Advanced Form Integration: from n/a through 1.89.4...

4.3CVSS0.00123EPSS
Exploits0References1
Rows per page
Query Builder