Lucene search
+L

47 matches found

CVE
CVE
added 2024/02/21 6:47 a.m.86 views

CVE-2024-25905

CVE-2024-25905 is a CSRF vulnerability in Mondula GmbH Multi Step Form for WordPress, affecting versions 1.7.18 and earlier. The attached documents identify the flaw as Cross-Site Request Forgery (CSRF) in Multi Step Form, with Patchstack noting the fix in 1.7.19. Public references indicate the i...

5.4CVSS6.7AI score0.00186EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/21 6:47 a.m.33 views

CVE-2024-25905 WordPress Multi Step Form Plugin <= 1.7.18 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Mondula GmbH Multi Step Form.This issue affects Multi Step Form: from n/a through 1.7.18...

5.4CVSS5.8AI score0.00186EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/02/20 12:0 a.m.11 views

PT-2024-21196 · Mondula Gmbh · Multi Step Form

Name of the Vulnerable Software and Affected Versions: Mondula GmbH Multi Step Form versions 1.7.18 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

5.4CVSS9.3AI score0.00186EPSS
SaveExploits0References5
NVD
NVD
added 2023/12/21 6:15 p.m.12 views

CVE-2023-50832

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mondula GmbH Multi Step Form allows Stored XSS.This issue affects Multi Step Form: from n/a through 1.7.13...

5.9CVSS0.00402EPSS
SaveExploits1References1
OSV
OSV
added 2023/12/21 6:15 p.m.7 views

CVE-2023-50832

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mondula GmbH Multi Step Form allows Stored XSS.This issue affects Multi Step Form: from n/a through 1.7.13...

4.8CVSS7.3AI score0.00402EPSS
SaveExploits1References1
Prion
Prion
added 2023/12/21 6:15 p.m.19 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mondula GmbH Multi Step Form allows Stored XSS.This issue affects Multi Step Form: from n/a through 1.7.13...

4.3CVSS6.9AI score0.00402EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/12/21 5:23 p.m.31 views

CVE-2023-50832 WordPress Multi Step Form Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mondula GmbH Multi Step Form allows Stored XSS.This issue affects Multi Step Form: from n/a through 1.7.13...

5.9CVSS5.9AI score0.00402EPSS
SaveExploits1References1
CVE
CVE
added 2023/12/21 5:23 p.m.75 views

CVE-2023-50832

CVE-2023-50832 affects Mondula Multi Step Form (WordPress plugin) with Stored XSS due to improper neutralization during web page generation. Affected versions: Multi Step Form

5.9CVSS6.5AI score0.00402EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/21 12:0 a.m.8 views

PT-2023-31663 · Mondula Gmbh · Multi Step Form

Name of the Vulnerable Software and Affected Versions: Mondula GmbH Multi Step Form versions 1.7.13 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations...

5.9CVSS5.6AI score0.00402EPSS
SaveExploits1References4
OSV
OSV
added 2023/11/22 6:15 p.m.4 views

CVE-2023-47758

Cross-Site Request Forgery CSRF vulnerability in Mondula GmbH Multi Step Form plugin = 1.7.11 versions...

8.8CVSS5.8AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/22 6:15 p.m.22 views

CVE-2023-47758

Cross-Site Request Forgery CSRF vulnerability in Mondula GmbH Multi Step Form plugin = 1.7.11 versions...

8.8CVSS0.00264EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/22 6:15 p.m.18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Mondula GmbH Multi Step Form plugin = 1.7.11 versions...

6.8CVSS7.3AI score0.00264EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/22 6:9 p.m.29 views

CVE-2023-47758 WordPress Multi Step Form Plugin <= 1.7.11 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Mondula GmbH Multi Step Form plugin = 1.7.11 versions...

5.4CVSS9AI score0.00264EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/22 6:9 p.m.47 views

CVE-2023-47758

The CVE-2023-47758 entry concerns Mondula GmbH’s WordPress Multi Step Form plugin. Affected versions are prior to 1.7.12 (per PT Security) and

8.8CVSS7.1AI score0.00264EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.8 views

PT-2023-30591 · Mondula Gmbh · Multi Step Form

Name of the Vulnerable Software and Affected Versions: Mondula GmbH Multi Step Form plugin versions prior to 1.7.12 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended action...

8.8CVSS8.5AI score0.00264EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/12/24 12:0 a.m.9 views

WordPress Mondula Multi Step Form Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Mondula Multi Step Form is used in one of the drag-and-drop form builder plugin . A cross-site scripting...

5.4CVSS6AI score0.01097EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/20 11:29 p.m.8 views

CVE-2018-14846

The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php...

5.4CVSS5.8AI score0.01097EPSS
SaveExploits1References3
Prion
Prion
added 2018/12/20 11:29 p.m.21 views

Cross site scripting

The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php...

3.5CVSS5.3AI score0.01097EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2018/12/20 11:29 p.m.26 views

CVE-2018-14846

The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php...

5.4CVSS5.4AI score0.01097EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2018/12/20 10:0 p.m.31 views

CVE-2018-14846

The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php...

5.5AI score0.01097EPSS
SaveExploits1References3
Rows per page
Query Builder