CVE-2023-48752

CVE-2023-48752 is a Reflected XSS in the WordPress Happyforms plugin (versions ≤ 1.25.9). Unauthenticated attackers could exploit input handling during page generation to execute script in a victim’s browser. Patch status varies by source: Wordfence lists the vulnerability as Unpatched for Happyf...

CVE-2023-45609

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POWR.Io Contact Form – Custom Builder, Payment Form, and More allows Stored XSS.This issue affects Contact Form – Custom Builder, Payment Form, and More: from n/a through 2.1.0...

CVE-2023-48752: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Happyforms Form builder to get in touch with visitors, grow your email list and collect payments — Happyforms allows Reflected XSS.This issue affects Form builder to get in touch with visitors, gro...

CVE-2023-5048

CVE-2023-5048 affects the WDContactFormBuilder WordPress plugin (versions

PT-2023-31577 · WordPress · Contact Form Builder

Name of the Vulnerable Software and Affected Versions: WDContactFormBuilder plugin for WordPress versions up to, and including, 1.0.72 Description: The issue arises from insufficient input sanitization and output escaping on the id user-supplied attribute in the 'Contact Form Builder' shortcode...

CVE-2023-23796

Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Contact Forms.This issue affects Form Builder | Create Responsive Contact Forms: from n/a through 1.9.9.0...

CVE-2023-23796

Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Contact Forms.This issue affects Form Builder | Create Responsive Contact Forms: from n/a through 1.9.9.0...

Input validation

Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Contact Forms.This issue affects Form Builder | Create Responsive Contact Forms: from n/a through 1.9.9.0...

CVE-2023-23796 WordPress Form Builder plugin <= 1.9.9.0 - CSV Injection vulnerability

A vulnerability in PluginOps Form Builder contact-form-add.This issue affects Form Builder: from n/a through = 1.9.9.0...

CVE-2023-23796

CVE-2023-23796 affects WordPress Form Builder (Create Responsive Contact Forms) plugin versions up to 1.9.9.0. Root cause: Improper neutralization of formula elements in a CSV file, enabling CSV injection. Public details in connected sources confirm the vulnerability and affected version range; r...

CVE-2023-23796 WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Contact Forms.This issue affects Form Builder | Create Responsive Contact Forms: from n/a through 1.9.9.0...

PT-2023-19211 · Unknown · Muneeb Form Builder

Name of the Vulnerable Software and Affected Versions: Muneeb Form Builder | Create Responsive Contact Forms versions 1.9.9.0 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file. This could potentially lead to unintended actions when a CS...

CVE-2023-23796: Improper Neutralization of Formula Elements in a CSV File

Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Contact Forms.This issue affects Form Builder | Create Responsive Contact Forms: from n/a through 1.9.9.0...

CVE-2023-35911: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Creative Solutions Contact Form Generator : Creative form builder for WordPress allows SQL Injection.This issue affects Contact Form Generator : Creative form builder for WordPress: from n/a throug...

CVE-2023-35910

CVE-2023-35910 affects Quasar form free – Contact Form Builder for WordPress (WordPress plugin Quasar form) up to version 6.0. The vulnerability is an SQL injection caused by improper neutralization of input, with CVSS v3.1 metrics indicating high impact on confidentiality, integrity, and availab...

CVE-2023-35910: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nucleusgenius Quasar form free – Contact Form Builder for WordPress allows SQL Injection.This issue affects Quasar form free – Contact Form Builder for WordPress: from n/a through 6.0...

CVE-2023-46075

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wpdevart Contact Form Builder, Contact Widget plugin = 2.1.6 versions...

CVE-2023-46075

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wpdevart Contact Form Builder, Contact Widget plugin = 2.1.6 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wpdevart Contact Form Builder, Contact Widget plugin = 2.1.6 versions...

CVE-2023-46075 WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wpdevart Contact Form Builder, Contact Widget plugin = 2.1.6 versions...