56 matches found
CVE-2014-10392
The cforms2 plugin before 10.2 for WordPress has XSS...
Cross site scripting
The cforms2 plugin before 10.2 for WordPress has XSS...
CVE-2014-10392
The cforms2 plugin before 10.2 for WordPress has XSS...
CVE-2014-10392
The CVE-2014-10392 entry concerns the WordPress cforms2 plugin, specifically versions before 10.2, which are affected by a cross-site scripting (XSS) vulnerability. The vulnerability is due to an XSS flaw in the plugin’s handling of input, allowing an attacker to inject and execute client-side sc...
CVE-2017-18570
The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries...
CVE-2015-9333
The cforms2 plugin before 14.6.10 for WordPress has SQL injection...
Sql injection
The cforms2 plugin before 14.6.10 for WordPress has SQL injection...
Sql injection
The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries...
CVE-2015-9333
CVE-2015-9333 affects WordPress cforms2 plugin versions prior to 14.6.10, with a SQL injection vulnerability in the plugin’s handling of inputs. Impact per sources includes the ability to execute illegal SQL commands (high severity). Remediation: upgrade to version 14.6.10 or later; no exploitati...
CVE-2015-9333
The cforms2 plugin before 14.6.10 for WordPress has SQL injection...
CVE-2017-18570
CVE-2017-18570 affects the WordPress plugin cforms2 prior to version 14.13. The vulnerability is an SQL injection in the tracking database GUI triggered via Delete Entries or Download Entries, enabling an attacker to manipulate the database. Reported CVSS details show high/severe impact (CVSSv3: ...
PT-2019-7292 · WordPress · Cforms2
Name of the Vulnerable Software and Affected Versions: cforms2 plugin versions prior to 14.6.10 Description: The issue is related to SQL injection. Recommendations: For versions prior to 14.6.10, update to version 14.6.10 or later to resolve the issue...
CVE-2015-9333: Improper Neutralization of Special Elements used in an SQL Command
The cforms2 plugin before 14.6.10 for WordPress has SQL injection...
CVE-2014-10393: Improper Neutralization of Input During Web Page Generation
The cforms2 plugin before 10.5 for WordPress has XSS...
CVE-2014-10392: Improper Neutralization of Input During Web Page Generation
The cforms2 plugin before 10.2 for WordPress has XSS...
CVE-2017-18570: Improper Neutralization of Special Elements used in an SQL Command
The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries...
CVE-2017-18559
The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues...
CVE-2017-18559
The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues...