Lucene search
K

21 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-39902

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00147EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/06/23 8:39 a.m.2 views

CVE-2025-52794

Cross-Site Request Forgery CSRF vulnerability in Creative-Solutions Creative Contact Form sexy-contact-form allows Stored XSS.This issue affects Creative Contact Form: from n/a through = 1.0.0...

7.1CVSS5.9AI score0.0008EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:49 a.m.9 views

CVE-2023-37988

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Creative Solutions Contact Form Generator plugin = 2.5.5 versions...

7.1CVSS5.9AI score0.21793EPSS
Exploits3
RedhatCVE
RedhatCVE
added 2025/05/23 4:36 a.m.3 views

CVE-2023-35911

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creative Solutions Contact Form Generator : Creative form builder for WordPress allows SQL Injection.This issue affects Contact Form Generator : Creative form builder for WordPress: from n/a throug...

9.8CVSS8.9AI score0.00147EPSS
Exploits0References1
NVD
NVD
added 2024/03/29 5:15 p.m.8 views

CVE-2024-30447

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Solutions Creative Image Slider – Responsive Slider Plugin allows Reflected XSS.This issue affects Creative Image Slider – Responsive Slider Plugin: from n/a through 2.1.3...

7.1CVSS6.9AI score0.00144EPSS
Exploits0References1
CVE
CVE
added 2024/03/29 4:51 p.m.50 views

CVE-2024-30447

Technical details about CVE-2024-30447 (Creative Image Slider – Responsive Slider Plugin) are not provided in the connected documents. No product version, root cause, impact, or patch information is publicly available here; monitor for official advisories and vendor/user notifications.

7.1CVSS8.6AI score0.00144EPSS
Exploits0References1
NVD
NVD
added 2023/11/06 9:15 a.m.6 views

CVE-2023-35911

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creative Solutions Contact Form Generator : Creative form builder for WordPress allows SQL Injection.This issue affects Contact Form Generator : Creative form builder for WordPress: from n/a throug...

9.8CVSS9.9AI score0.00147EPSS
Exploits0References1
OSV
OSV
added 2023/11/06 9:15 a.m.0 views

CVE-2023-35911

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creative Solutions Contact Form Generator : Creative form builder for WordPress allows SQL Injection.This issue affects Contact Form Generator : Creative form builder for WordPress: from n/a throug...

9.8CVSS7.3AI score0.00147EPSS
Exploits0References1
Prion
Prion
added 2023/11/06 9:15 a.m.11 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creative Solutions Contact Form Generator : Creative form builder for WordPress allows SQL Injection.This issue affects Contact Form Generator : Creative form builder for WordPress: from n/a throug...

7.5CVSS7.9AI score0.00147EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/06 8:44 a.m.93 views

CVE-2023-35911

CVE-2023-35911 concerns SQL Injection in the WordPress plugin Contact Form Generator (Creative form builder) for WordPress, affecting versions up to 2.6.0. The issue is described as Improper Neutralization of Special Elements used in an SQL Command, i.e., an SQL injection vulnerability. Affected ...

9.8CVSS8.9AI score0.00147EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/06 8:44 a.m.6 views

CVE-2023-35911 WordPress Contact Form Generator Plugin <= 2.6.0 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creative Solutions Contact Form Generator : Creative form builder for WordPress allows SQL Injection.This issue affects Contact Form Generator : Creative form builder for WordPress: from n/a throug...

8.5CVSS8.9AI score0.00147EPSS
Exploits0References1
NVD
NVD
added 2023/08/10 11:15 a.m.22 views

CVE-2023-37988

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Creative Solutions Contact Form Generator plugin = 2.5.5 versions...

7.1CVSS6.2AI score0.21793EPSS
Exploits3References2
OSV
OSV
added 2023/08/10 11:15 a.m.1 views

CVE-2023-37988

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Creative Solutions Contact Form Generator plugin = 2.5.5 versions...

6.1CVSS7.3AI score
Exploits0References2
Prion
Prion
added 2023/08/10 11:15 a.m.21 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Creative Solutions Contact Form Generator plugin = 2.5.5 versions...

5.8CVSS6AI score0.21793EPSS
Exploits3References2Affected Software1
EUVD
EUVD
added 2023/08/10 10:39 a.m.25 views

EUVD-2023-41815

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Creative Solutions Contact Form Generator plugin = 2.5.5 versions...

7.1CVSS6AI score0.21793EPSS
Exploits3References2
CVE
CVE
added 2023/08/10 10:39 a.m.73 views

CVE-2023-37988

The CVE-2023-37988 entry corresponds to the WordPress plugin Contact Form Generator (Creative Solutions) with a reflected XSS flaw in versions

7.1CVSS6AI score0.21793EPSS
Exploits3References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/10 12:0 a.m.6 views

PT-2023-5945 · Creative Solutions · Creative Solutions Contact Form Generator

Name of the Vulnerable Software and Affected Versions: Creative Solutions Contact Form Generator plugin versions = 2.5.5 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability in the Creative Solutions Contact Form Generator plugin. This vulnerability...

7.1CVSS6AI score0.21793EPSS
Exploits3References14
OSV
OSV
added 2022/05/17 7:57 p.m.13 views

GHSA-WXG6-F773-G2F7 jQuery File Upload Plugin Unrestricted file upload vulnerability

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form formerly Sexy Contact Form before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute...

9.8CVSS9.8AI score0.91552EPSS
Exploits2References9
Github Security Blog
Github Security Blog
added 2022/05/17 7:57 p.m.13 views

jQuery File Upload Plugin Unrestricted file upload vulnerability

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form formerly Sexy Contact Form before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute...

9.8CVSS8AI score0.91552EPSS
Exploits2References10Affected Software1
0day.today
0day.today
added 2020/03/08 12:0 a.m.130 views

Creative Contact Form 4.6.2 Directory Traversal Vulnerability

Creative Contact Form version 4.6.2 before Dec 03 2019 suffers from a directory traversal vulnerability. Directory Traversal in Creative Contact Form Overview Identifier: AIT-SA-20200301-01 Target: Creative Contact Form for Joomla Vendor: Creative Solutions Version: 4.6.2 before Dec 03 2019 CVE:...

0.1AI score0.00536EPSS
Exploits3
Rows per page
Query Builder