2 matches found
CVE-2020-36919 WPForms 1.7.8 - Cross-Site Scripting (XSS)
WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser...
6.1CVSS0.00375EPSS
SaveExploits1References3
CVE-2020-36919: Improper Neutralization of Input During Web Page Generation
WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser...
6.1CVSS6.3AI score0.00375EPSS
SaveExploits1References1
20