Lucene search
+L

35 matches found

Vulnrichment
Vulnrichment
•added 2024/04/17 9:46 a.m.•19 views

CVE-2024-32527 WordPress Jotform Online Forms plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jotform Jotform Online Forms allows Stored XSS.This issue affects Jotform Online Forms: from n/a through 1.3.1...

6.5CVSS6.7AI score0.00291EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/17 9:46 a.m.•56 views

CVE-2024-32527 WordPress Jotform Online Forms plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jotform Jotform Online Forms allows Stored XSS.This issue affects Jotform Online Forms: from n/a through 1.3.1...

6.5CVSS6.5AI score0.00291EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/17 9:46 a.m.•116 views

CVE-2024-32527

CVE-2024-32527 affects the Jotform Online Forms WordPress plugin (versions up to and including 1.3.1). The issue is Stored Cross‑Site Scripting caused by insufficient input sanitization and output escaping in shortcode attributes, exploitable by authenticated users with contributor level access a...

6.5CVSS5.2AI score0.00291EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•7 views

CVE-2024-32527: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jotform Jotform Online Forms allows Stored XSS.This issue affects Jotform Online Forms: from n/a through 1.3.1...

6.5CVSS5.8AI score0.00291EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•21 views

WordPress Plugin Jotform Online Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS5.9AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•21 views

PT-2024-24646 · Jotform · Jotform Online Forms

Name of the Vulnerable Software and Affected Versions: Jotform Online Forms versions 1.3.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicio...

6.5CVSS6.1AI score0.00291EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/04/15 2:13 p.m.•17 views

WordPress Jotform Online Forms plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Jotform Online Forms versions = 1.3.1...

6.5CVSS6.1AI score0.00291EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/04/15 12:00 a.m.•29 views

WordPress Jotform Online Forms Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Jotform Online Forms Type Plugin Vulnerable versions = 1.3.1 Fixed in 1.3.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32527 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6eac99777a8f Credits Ngô Thiên An ancorn from VNPT-VCI...

6.5CVSS6.5AI score0.00291EPSS
SaveExploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/11/05 4:04 p.m.•12 views

Malicious code in jotform-webhook-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79c05d67fd61e4cb82e93b3c98181d7cc58e89c7dab47e8aab381f60211ef6db The OpenSSF Package Analysis project identified 'jotform-webhook-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

6.9AI score
SaveExploits0
osv_mal
osv_mal
•added 2023/11/05 4:04 p.m.•46 views

MAL-2023-8438 Malicious code in jotform-webhook-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79c05d67fd61e4cb82e93b3c98181d7cc58e89c7dab47e8aab381f60211ef6db The OpenSSF Package Analysis project identified 'jotform-webhook-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/04/12 2:02 a.m.•9 views

Malicious code in uploadcare-jotform-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2d37a0408ad8c603efcb131e322f0f2d2a142058620fa1b41f396e212590b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2023/04/12 2:02 a.m.•22 views

MAL-2023-919 Malicious code in uploadcare-jotform-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2d37a0408ad8c603efcb131e322f0f2d2a142058620fa1b41f396e212590b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2018/02/14 8:26 p.m.•14 views

jotform.com XSS vulnerability

Open Bug Bounty ID: OBB-559843 Description| Value ---|--- Affected Website:| jotform.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based o...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/02/16 5:47 a.m.•14 views

jotform.com XSS vulnerability

Vulnerable URL: https://www.jotform.com/upload.php?qid=3"=source-existing=themes=uploadImageIframe Details: Description| Value ---|--- Patched:| Yes, at 26.05.2017 Latest check for patch:| 26.05.2017 07:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5698 VIP...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2016/03/04 7:57 p.m.•12 views

jotform.com XSS vulnerability

Vulnerable URL: http://www.jotform.com/answers/188518-Expired-certificate-on-https-submit-jotformpro-com-as-of-2013-02-28?message=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%3Cimg/onerror=%27;alert%28/XSSPOSED/%29;%27src=1%3E Details: Description| Value ---|--- Patched:| Yes, at 15.02.2017...

6.3AI score
SaveExploits0
Rows per page
Query Builder