1098 matches found
CVE-2023-23796 WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to CSV Injection
Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Contact Forms.This issue affects Form Builder | Create Responsive Contact Forms: from n/a through 1.9.9.0...
CVE-2023-23796
CVE-2023-23796 affects WordPress Form Builder (Create Responsive Contact Forms) plugin versions up to 1.9.9.0. Root cause: Improper neutralization of formula elements in a CSV file, enabling CSV injection. Public details in connected sources confirm the vulnerability and affected version range; r...
PT-2023-19211 · Unknown · Muneeb Form Builder
Name of the Vulnerable Software and Affected Versions: Muneeb Form Builder | Create Responsive Contact Forms versions 1.9.9.0 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file. This could potentially lead to unintended actions when a CS...
CVE-2023-35910
CVE-2023-35910 affects Quasar form free – Contact Form Builder for WordPress (WordPress plugin Quasar form) up to version 6.0. The vulnerability is an SQL injection caused by improper neutralization of input, with CVSS v3.1 metrics indicating high impact on confidentiality, integrity, and availab...
CVE-2023-46075
Unauth. Reflected Cross-Site Scripting XSS vulnerability in wpdevart Contact Form Builder, Contact Widget plugin = 2.1.6 versions...
CVE-2023-46075
Unauth. Reflected Cross-Site Scripting XSS vulnerability in wpdevart Contact Form Builder, Contact Widget plugin = 2.1.6 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in wpdevart Contact Form Builder, Contact Widget plugin = 2.1.6 versions...
CVE-2023-46075 WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in wpdevart Contact Form Builder, Contact Widget plugin = 2.1.6 versions...
CVE-2023-46075
CVE-2023-46075 describes an unauthenticated, reflected Cross-Site Scripting (XSS) in the WordPress plugin set of wpdevart Contact Form Builder and Contact Widget, listed as vulnerable up to version 2.1.6 (and up to 2.1.7 per Patchstack). The vulnerability path enables injection of scriptcode that...
WordPress Form Builder Plugin <= 1.0.72 is vulnerable to Cross Site Scripting (XSS)
Software Form Builder Type Plugin Vulnerable versions = 1.0.72 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5048 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID de60a9a1bf56 Credits Lana Codes Required privileg...
PT-2023-29827 · Wpdevart · Wpdevart Contact Form Builder +1
Name of the Vulnerable Software and Affected Versions: wpdevart Contact Form Builder, Contact Widget plugin versions 2.1.6 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website,...
WordPress Plugin Contact Form Builder, Contact Widget Cross Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Spider Teams ApplyOnline – Application Form Builder and Manager plugin = 2.5.2 versions...
WordPress Plugin ApplyOnline - Application Form Builder and Manager Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-45756 WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Spider Teams ApplyOnline – Application Form Builder and Manager plugin = 2.5.2 versions...
CVE-2023-45756
CVE-2023-45756: Unauthenticated reflected XSS in WordPress plugin ApplyOnline – Application Form Builder and Manager (Spider Teams) affects versions
PT-2023-29672 · Spider Teams · Spider Teams Applyonline
Name of the Vulnerable Software and Affected Versions: Spider Teams ApplyOnline – Application Form Builder and Manager plugin versions = 2.5.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject...
CVE-2023-45070
Unauth. Reflected Cross-Site Scripting XSS vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin = 1.15.18 versions...