Lucene search
+L

7 matches found

Patchstack
Patchstack
•added 2025/02/17 10:25 a.m.•18 views

WordPress Wise Forms plugin <= 1.2.0 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Steven Pereira aka Cursed && Muktanand Kale aka Muktimantras in WordPress Plugin Wise Forms versions = 1.2.0...

6.1CVSS8.4AI score0.0038EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2025/02/17 6:15 a.m.•23 views

CVE-2024-13603

The Wise Forms WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks via malicious form submissions...

6.1CVSS8.5AI score0.0038EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/02/17 6:00 a.m.•7 views

CVE-2024-13603 Wise Forms <= 1.2.0 - Unauthenticated Stored XSS

The Wise Forms WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks via malicious form submissions...

8.5AI score0.0038EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/17 6:00 a.m.•73 views

CVE-2024-13603

The Wise Forms WordPress plugin, affecting versions through 1.2.0 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows unauthenticated users to perform attacks by submitting malicious forms. ...

6.1CVSS8.5AI score0.0038EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2025/02/17 12:00 a.m.•18 views

WordPress plugin Wise Forms has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.1CVSS8.1AI score0.0038EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/17 12:00 a.m.•12 views

CVE-2024-13603: Improper Neutralization of Input During Web Page Generation

The Wise Forms WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks via malicious form submissions...

6.1CVSS8.6AI score0.0038EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/17 12:00 a.m.•17 views

PT-2025-6580 · WordPress · Wise Forms

Name of the Vulnerable Software and Affected Versions: Wise Forms WordPress plugin version 1.2.0 Description: The issue allows unauthenticated users to perform Stored Cross-Site Scripting attacks via malicious form submissions because the plugin does not sanitise and escape some of its settings...

6.1CVSS8.5AI score0.0038EPSS
SaveExploits1References7
Rows per page
Query Builder