Lucene search
+L

12 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/13 12:00 a.m.•6 views

CVE-2025-64369: Missing Authorization

Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form Email: from n/a through = 1.3.58...

6.5CVSS6AI score0.00248EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 12:00 p.m.•19 views

CVE-2025-24727

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through = 1.3.52...

5.9CVSS7.2AI score0.00314EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:39 a.m.•23 views

CVE-2024-31302

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44...

5.3CVSS8.5AI score0.0047EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:17 a.m.•16 views

CVE-2023-48318

Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Contact Form Email allows Functionality Bypass.This issue affects Contact Form Email: from n/a through 1.3.41...

6.5CVSS6.9AI score0.00312EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 3:36 a.m.•26 views

CVE-2023-28494

Missing Authorization vulnerability in CodePeople Contact Form Email allows Functionality Misuse.This issue affects Contact Form Email: from n/a through 1.3.31...

4.3CVSS6.9AI score0.00313EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•7 views

PT-2025-5541

Name of the Vulnerable Software and Affected Versions CodePeople Contact Form Email versions 1.3.52 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

5.9CVSS0.00314EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•8 views

CVE-2025-24727: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through = 1.3.52...

5.9CVSS5.8AI score0.00314EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/04 12:00 a.m.•5 views

PT-2024-12167

Name of the Vulnerable Software and Affected Versions CodePeople Contact Form Email versions 1.3.31 and earlier Description The issue is related to a Missing Authorization vulnerability, which allows functionality misuse in the CodePeople Contact Form Email. Recommendations For versions 1.3.31 an...

4.3CVSS0.00313EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/06/04 12:00 a.m.•6 views

PT-2024-13579

Name of the Vulnerable Software and Affected Versions CodePeople Contact Form Email versions 1.3.41 and earlier Description The issue is related to an Improper Restriction of Excessive Authentication Attempts, which allows for Functionality Bypass in the CodePeople Contact Form Email...

6.5CVSS0.00312EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/04 12:00 a.m.•8 views

CVE-2023-48318: Improper Restriction of Excessive Authentication Attempts

Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Contact Form Email allows Functionality Bypass.This issue affects Contact Form Email: from n/a through 1.3.41...

6.5CVSS5.8AI score0.00312EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/04 12:00 a.m.•7 views

CVE-2023-28494: Missing Authorization

Missing Authorization vulnerability in CodePeople Contact Form Email allows Functionality Misuse.This issue affects Contact Form Email: from n/a through 1.3.31...

4.3CVSS7.8AI score0.00313EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/10 12:00 a.m.•5 views

CVE-2024-31302: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44...

5.3CVSS5.8AI score0.0047EPSS
SaveExploits0References2
Rows per page
Query Builder