165 matches found
Calculated Fields Form < 1.2.41 - Authenticated (Admin+) Stored Cross-Site Scripting
Description The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.40 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress Calculated Fields Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)
Software Calculated Fields Form Type Plugin Vulnerable versions = 1.2.40 Fixed in 1.2.41 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6446 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 412adf4208bf Credits emad Required...
WordPress plugin Calculated Fields Form 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...
WordPress Calculated Fields Form Plugin <= 1.1.120 is vulnerable to Other Vulnerability Type
Software Calculated Fields Form Type Plugin Vulnerable versions = 1.1.120 Fixed in 1.1.121 OWASP Top 10 A5: Broken Access Control Classification Other Vulnerability Type CVE CVE-2023-26523 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b1f5377f573e Credits István Márton...
Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown Fields
The plugin does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup Partial fixes were implemented in versions...
WordPress Calculated Fields Form Plugin Cross Site Scripting (CVE-2020-7228)
A stored cross-site scripting vulnerability exists in Calculated Fields Form plugin of WordPress. The vulnerability is due to insufficient sanitization of user input to "field name" and "form name" of a form in the web application of the plugin...
The vulnerability of the CRM system Odoo Community Edition and the ERP system Odoo Enterprise Edition lies in errors in processing non-stored calculated fields by the superuser, allowing attackers to escalate their privileges.
The vulnerability of the CRM system Odoo Community Edition and the ERP system Odoo Enterprise Edition is related to errors in processing non-saved calculated fields by the superuser. Exploiting this vulnerability can allow an attacker to enhance their privileges within the target system by sendin...
WordPress Calculated Fields Form Plugin <= 1.0.353 XSS Vulnerabilities
The WordPress plugin SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113633";...
CVE-2020-7228
The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authenticated user...
CVE-2020-7228
The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authenticated user...
CVE-2020-7228
The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authenticated user...
Cross site scripting
The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authenticated user...
CVE-2020-7228
The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authenticated user...
CVE-2020-7228
CVE-2020-7228 affects WordPress Calculated Fields Form plugin (versions
CVE-2020-7228: Improper Neutralization of Input During Web Page Generation
The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authenticated user...
WordPress Calculated Fields Form plugin <= 1.0.353 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Ben Armstrong Spider Sec Ltd in WordPress Calculated Fields Form plugin versions = 1.0.353. Solution Update the WordPress Calculated Fields Form plugin to the latest available version at least 1.0.354...
Calculated Fields Form < 1.0.354 - Authenticated Stored XSS
An authenticated user with access to edit or create Calculated Fields Form content can inject javascript into input fields such as ‘field name’ and ‘form name’...
WordPress Calculated Fields Form 1.0.x Session Hijacking
Exploit Title: WordPress Calculated Fields Form =1.0.x - Httponly bypass & admin session hijackig. Date: 2016-02-22 Google Dork: Index of /wp-content/plugins/calculated-fields-form/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Plugin URI:...
WordPress Calculated Fields Form Plugin SQL Injection
An SQL injection vulnerability exists in the WordPress Calculated Fields Form Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...
