3 matches found
CVE-2018-7747
Multiple cross-site scripting XSS vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a greeting message, 2 the email transaction log, or 3 an imported form...
CVE-2018-7747
Multiple cross-site scripting XSS vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a greeting message, 2 the email transaction log, or 3 an imported form...
PT-2018-18254
Name of the Vulnerable Software and Affected Versions: Caldera Forms plugin versions prior to 1.6.0-rc.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved through various vectors, including a greeting message, the email transaction log, or...