Lucene search
+L

289 matches found

Patchstack
Patchstack
•added 2024/07/09 6:39 a.m.•20 views

WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin ARForms Form Builder versions = 1.6.7...

7.1CVSS6.1AI score0.00327EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/07/09 12:00 a.m.•26 views

WordPress ARForms Form Builder Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)

Software ARForms Form Builder Type Plugin Vulnerable versions = 1.6.7 Fixed in 1.6.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37920 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b04d176ed420 Credits Yudistira Arya Required...

7.1CVSS6.6AI score0.00327EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2024/06/12 6:15 a.m.•18 views

CVE-2024-0427

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions...

6.3CVSS5.8AI score0.00358EPSS
SaveExploits2References1
NVD
NVD
•added 2024/06/12 6:15 a.m.•40 views

CVE-2024-0427

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions...

6.3CVSS0.00358EPSS
SaveExploits2References1
CVE
CVE
•added 2024/06/12 6:00 a.m.•84 views

CVE-2024-0427

The ARForms - Premium WordPress Form Builder Plugin for WordPress, in versions before 6.4.1 , is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the improper escaping of user-controlled input when reflected in specific AJAX actions . This allows an attacker to execute malic...

6.3CVSS6.4AI score0.00358EPSS
SaveExploits2References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/12 6:00 a.m.•22 views

CVE-2024-0427 Arforms < 6.4.1 - Reflected XSS

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions...

6.8AI score0.00358EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2024/06/12 6:00 a.m.•47 views

CVE-2024-0427 Arforms < 6.4.1 - Reflected XSS

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions...

0.00358EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2024/06/12 12:00 a.m.•21 views

WordPress plugin ARForms security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.3CVSS6.7AI score0.00358EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•9 views

CVE-2024-0427: Improper Neutralization of Input During Web Page Generation

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions...

6.3CVSS5.8AI score0.00358EPSS
SaveExploits2References1
osv_cve
osv_cve
•added 2024/06/09 6:15 p.m.•18 views

CVE-2024-32704

Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4...

6.5CVSS5.8AI score0.00335EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/09 6:15 p.m.•51 views

CVE-2024-32703

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through = 6.4...

8.1CVSS0.00577EPSS
SaveExploits0References2
NVD
NVD
•added 2024/06/09 6:15 p.m.•42 views

CVE-2024-32704

Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through = 6.4...

7.1CVSS0.00335EPSS
SaveExploits0References2
NVD
NVD
•added 2024/06/09 6:15 p.m.•42 views

CVE-2024-32705

Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through = 6.4...

8.8CVSS0.00382EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/06/09 6:15 p.m.•22 views

CVE-2024-32705

Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4...

8.8CVSS5.8AI score0.00382EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/09 6:15 p.m.•19 views

CVE-2024-32703

Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4...

8.1CVSS5.8AI score0.00577EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/09 5:17 p.m.•17 views

CVE-2024-32703 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability

Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4...

7.7CVSS6.9AI score0.00577EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/09 5:17 p.m.•65 views

CVE-2024-32703 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through = 6.4...

7.7CVSS0.00577EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/09 5:17 p.m.•86 views

CVE-2024-32703

The ARForms WordPress plugin (versions

8.1CVSS5.9AI score0.00577EPSS
SaveIn wildExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/09 5:11 p.m.•20 views

CVE-2024-32704 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability

Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4...

7.1CVSS6.9AI score0.00335EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/09 5:11 p.m.•57 views

CVE-2024-32704 WordPress ARForms plugin <= 6.4 - Subscriber+ Arbitrary WordPress Options Removal vulnerability

Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through = 6.4...

7.1CVSS0.00335EPSS
SaveExploits0References1
Rows per page
Query Builder