EUVD-2023-29404

Malicious code in bioql PyPI...

CVE-2023-52203 WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oliver Seidel, Bastian Germann cformsII allows Stored XSS.This issue affects cformsII: from n/a through 15.0.5...

CVE-2023-25449

Cross-Site Request Forgery CSRF vulnerability in Oliver Seidel, Bastian Germann cformsII plugin = 15.0.4 versions...

CVE-2023-25449

Cross-Site Request Forgery CSRF vulnerability in Oliver Seidel, Bastian Germann cformsII plugin = 15.0.4 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Oliver Seidel, Bastian Germann cformsII plugin = 15.0.4 versions...

WordPress CformsII Plugin <= 15.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software CformsII Type Plugin Vulnerable versions = 15.0.4 Fixed in 15.0.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25449 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f61b406fa27a Credits Rio Darmawan Required...

WordPress CformsII plugin <= 15.0.1 - Unauthenticated HTML Injection & Cross-Site Request Forgery (CSRF) vulnerabilities

Unauthenticated HTML Injection & Cross-Site Request Forgery CSRF vulnerabilities found by Jerome Bruandet Nintechnet in WordPress CformsII plugin versions = 15.0.1. Solution Update the WordPress CformsII plugin to the latest available version at least 15.0.2...

Unrestricted file upload

Unrestricted file upload vulnerability in libnonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the cfuploadfile2 parameter, then accessing the file via a direct request to the fi...

CVE-2014-9473

Unrestricted file upload vulnerability in libnonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the cfuploadfile2 parameter, then accessing the file via a direct request to the fi...