WordPress STARTEND Subscription Add-On for GravityForms Plugin <= 4.0.3 is vulnerable to Cross Site Scripting (XSS)

Software STARTEND Subscription Add-On for GravityForms Type Plugin Vulnerable versions = 4.0.3 Fixed in 4.0.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dc9e3b41e070 Credits...

GravityForms < 2.4.9 - Hashed Password Leakage

The gravityforms WordPress plugin was affected by a Hashed Password Leakage security vulnerability...

Gravity Forms <= 1.9.15.11 - Authenticated Reflected Cross-Site Scripting (XSS)

The gravityforms WordPress plugin was affected by a Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress GravityForms 1.9.15.11 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: WordPress plugin GravityForms Product URL: http://www.gravityforms.com/ Vendor: Rocketgenius Vulnerability Type: Reflected Cross-site Scripting CWE-79 Vulnerable Versions: 1.9.15.11 other versions not tested Fixed Version: 1.9.16 Solution...

Gravity Forms <= 1.9.6 - Cross-Site Scripting (XSS)

The gravityforms WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...