Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-26533

Malicious code in bioql PyPI...

5.4CVSS6.4AI score0.00202EPSS
Exploits0References1
NVD
NVD
added 2025/09/03 3:15 p.m.3 views

CVE-2025-58639

Missing Authorization vulnerability in Ali Khallad Contact Form By Mega Forms mega-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form By Mega Forms: from n/a through = 1.6.1...

5.4CVSS0.00202EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.4 views

PT-2025-35767

Name of the Vulnerable Software and Affected Versions: Ali Khallad Contact Form By Mega Forms versions through 1.6.1 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update Ali Khallad Contact Form By Me...

5.4CVSS6.3AI score0.00202EPSS
Exploits0References3
OSV
OSV
added 2022/09/09 3:15 p.m.5 views

CVE-2022-40191

Authenticated subscriber+ Stored Cross-Site Scripting XSS vulnerability in Ali Khallad's Contact Form By Mega Forms plugin = 1.2.4 at WordPress...

5.4CVSS5.8AI score0.00438EPSS
Exploits0References2
NVD
NVD
added 2022/09/09 3:15 p.m.29 views

CVE-2022-40191

Authenticated subscriber+ Stored Cross-Site Scripting XSS vulnerability in Ali Khallad's Contact Form By Mega Forms plugin = 1.2.4 at WordPress...

5.4CVSS0.00438EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/09/09 2:39 p.m.37 views

CVE-2022-40191 WordPress Contact Form By Mega Forms plugin <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated subscriber+ Stored Cross-Site Scripting XSS vulnerability in Ali Khallad's Contact Form By Mega Forms plugin = 1.2.4 at WordPress...

5.4CVSS5.4AI score0.00438EPSS
Exploits0References2
CVE
CVE
added 2022/09/09 2:39 p.m.62 views

CVE-2022-40191

Summary: CVE-2022-40191 affects the WordPress plugin “Ali Khallad’s Contact Form By Mega Forms” up to version 1.2.4. The issue is an authenticated (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability stemming from inadequate sanitization/escaping of input, enabling script injection by us...

5.4CVSS5.2AI score0.00438EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder