Lucene search
+L

1313 matches found

Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.13 views

PT-2025-45214

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue affects Range Slider Addon for Gravity Forms: from n/a through = 1.1.6...

6.4AI score0.00215EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.11 views

PT-2025-45404

Name of the Vulnerable Software and Affected Versions Gravity Forms versions prior to 2.9.21 Description The Gravity Forms plugin for WordPress contains a flaw that allows unauthenticated attackers to upload arbitrary files to the server. This issue is caused by missing file type validation withi...

9.8CVSS6AI score0.01063EPSS
SaveExploits0References22
RedhatCVE
RedhatCVE
added 2025/10/28 6:52 p.m.13 views

CVE-2025-32785

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions prior to 6.3 are vulnerable to cross-site scripting XSS via the Address field in the Subscribed Lists group management section...

5.4CVSS5.8AI score0.00234EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 2:38 a.m.15 views

CVE-2025-62981

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Phishing.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through = 1.2.8...

4.7CVSS6.9AI score0.0021EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/27 7:16 p.m.15 views

CVE-2025-32785

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions prior to 6.3 are vulnerable to cross-site scripting XSS via the Address field in the Subscribed Lists group management section...

5.4CVSS0.00234EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/10/27 6:44 p.m.7 views

CVE-2025-32785 Pi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field)

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions prior to 6.3 are vulnerable to cross-site scripting XSS via the Address field in the Subscribed Lists group management section...

5.1CVSS5.4AI score0.00234EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/27 6:44 p.m.10 views

CVE-2025-32785 Pi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field)

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions prior to 6.3 are vulnerable to cross-site scripting XSS via the Address field in the Subscribed Lists group management section...

5.1CVSS5.9AI score
SaveExploits0References3
EUVD
EUVD
added 2025/10/27 6:44 p.m.12 views

EUVD-2025-36328

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions prior to 6.3 are vulnerable to cross-site scripting XSS via the Address field in the Subscribed Lists group management section...

5.1CVSS5.3AI score0.00234EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/10/27 6:44 p.m.18 views

CVE-2025-32785 Pi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field)

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions prior to 6.3 are vulnerable to cross-site scripting XSS via the Address field in the Subscribed Lists group management section...

5.1CVSS0.00234EPSS
SaveExploits1References1
CVE
CVE
added 2025/10/27 6:44 p.m.18 views

CVE-2025-32785

Pi-hole Admin Interface (Pi-hole) versions prior to 6.3 are vulnerable to cross-site scripting (XSS) via the Address field in the Subscribed Lists group management. An authenticated user can inject JavaScript by placing a payload in Address when creating or editing a list entry. The XSS is trigge...

5.4CVSS5.4AI score0.00234EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2025/10/27 12:21 p.m.12 views

WordPress Range Slider Addon for Gravity Forms plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by HunSec in WordPress Plugin Range Slider Addon for Gravity Forms versions = 1.1.6...

6.1CVSS5.9AI score0.00215EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/10/27 3:30 a.m.11 views

EUVD-2025-35964

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Phishing.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through = 1.2.8...

4.7CVSS6.4AI score0.0021EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/27 2:15 a.m.9 views

CVE-2025-62981

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Phishing.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through = 1.2.8...

4.7CVSS0.0021EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.19 views

CVE-2025-62981

CVE-2025-62981 is an Open Redirect vulnerability in the WordPress plugin WP Gravity Forms Zoho CRM and Bigin (gf-zoho)

4.7CVSS6.5AI score0.0021EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.4 views

CVE-2025-62981 WordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.8 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Phishing.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through = 1.2.8...

4.7CVSS6.5AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.20 views

CVE-2025-62981 WordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.8 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Phishing.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through = 1.2.8...

4.7CVSS0.0021EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:00 a.m.12 views

PT-2025-43853

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Phishing.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through = 1.2.8...

4.7CVSS6.9AI score0.0021EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/27 12:00 a.m.13 views

WordPress plugin WP Gravity Forms Zoho CRM and Bigin security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security...

4.7CVSS5.7AI score0.0021EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:00 a.m.15 views

PT-2025-44010

Name of the Vulnerable Software and Affected Versions Pi-hole Admin Interface versions prior to 6.3 Description The Pi-hole Admin Interface, a web interface for managing the Pi-hole advertisement and internet tracker blocking application, is susceptible to a cross-site scripting XSS issue. This...

5.1CVSS5.7AI score0.00234EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/10/23 3:14 p.m.11 views

CVE-2025-60209

Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Object Injection.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through = 1.2.6...

9.8CVSS7AI score0.00542EPSS
SaveExploits0References1
Rows per page
Query Builder