4 matches found
weForms < 1.6.4 - CSV Injection
The plugin allows CSV injection via a form's entry...
7.5CVSS4.2AI score0.0302EPSS
SaveExploits1References2Affected Software1
CVE-2020-22276
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...
9.8CVSS0.0302EPSS
SaveExploits1References3
CVE-2020-22276
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry...
9.6AI score0.0302EPSS
SaveExploits1References3
PT-2020-15447
Name of the Vulnerable Software and Affected Versions WeForms Wordpress Plugin version 1.4.7 Description The issue allows CSV injection via a form's entry. Recommendations For WeForms Wordpress Plugin version 1.4.7, consider disabling the form entry feature until a patch is available to prevent C...
9.8CVSS0.0302EPSS
SaveExploits1References9
20