Lucene search
+L

57 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-11048

Malware in sbrugna...

4.8CVSS5.7AI score0.00654EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2023-56881

Malicious code in bioql PyPI...

7.5CVSS8.1AI score0.00443EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-38467

Malicious code in bioql PyPI...

4.3CVSS9.1AI score0.0047EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-49939

Malicious code in bioql PyPI...

8.8CVSS9AI score0.00208EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2024-19733

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00317EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:06 a.m.•17 views

CVE-2023-34387

Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3...

4.3CVSS8.5AI score0.0047EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:23 a.m.•23 views

CVE-2023-52208

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Constant Contact Constant Contact Forms.This issue affects Constant Contact Forms: from n/a through 2.4.2...

7.5CVSS7.8AI score0.00443EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:04 p.m.•22 views

CVE-2021-24134

Unvalidated input and lack of output encoding in the Constant Contact Forms WordPress plugin, versions before 1.8.8, lead to multiple Stored Cross-Site Scripting vulnerabilities, which allowed high-privileged user Editor+ to inject arbitrary JavaScript code or HTML in posts where the malicious fo...

4.8CVSS6AI score0.00654EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2024/12/13 3:15 p.m.•9 views

CVE-2023-34387

Missing Authorization vulnerability in Constant Contact Constant Contact Forms constant-contact-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through = 2.0.3...

4.3CVSS5.8AI score0.0047EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/13 3:15 p.m.•27 views

CVE-2023-34387

Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3...

4.3CVSS0.0047EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:23 p.m.•35 views

CVE-2023-34387 WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3...

4.3CVSS0.0047EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•19 views

WordPress plugin Constant Contact Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.6AI score0.0047EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•1 views

CVE-2023-34387: Missing Authorization

Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3...

4.3CVSS5.9AI score0.0047EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/13 2:15 a.m.•45 views

CVE-2024-9614

The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.0052EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/11/13 2:02 a.m.•43 views

CVE-2024-9614 Constant Contact Forms by MailMunch <= 2.1.2 - Reflected Cross-Site Scripting

The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS0.0052EPSS
SaveExploits0References6
CVE
CVE
•added 2024/11/13 2:02 a.m.•92 views

CVE-2024-9614

CVE-2024-9614 affects the WordPress plugin Constant Contact Forms by MailMunch. It is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper escaping in add_query_arg across all versions up to 2.1.2. Unauthenticated attackers can induce user-visible script execution by tricking a...

6.1CVSS6AI score0.0052EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/13 2:02 a.m.•19 views

CVE-2024-9614 Constant Contact Forms by MailMunch <= 2.1.2 - Reflected Cross-Site Scripting

The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS6.5AI score0.0052EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•3 views

CVE-2024-9614: Improper Neutralization of Input During Web Page Generation

The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary...

6.1CVSS6AI score0.0052EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/13 12:00 a.m.•23 views

PT-2024-39719 · Mailmunch · Constant Contact Forms By Mailmunch

Name of the Vulnerable Software and Affected Versions: Constant Contact Forms by MailMunch plugin for WordPress versions up to, and including, 2.1.2 Description: The issue arises from the use of add query arg without proper escaping on the URL, allowing unauthenticated attackers to inject arbitra...

6.1CVSS9.3AI score0.0052EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•29 views

WordPress plugin Constant Contact Forms by MailMunch 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the WordPress plugin Constant Contact...

6.1CVSS7.5AI score0.0052EPSS
SaveExploits0References6
Rows per page
Query Builder