Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-38097

Malicious code in bioql PyPI...

6.1CVSS5.6AI score0.00553EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:54 a.m.7 views

CVE-2023-33971

Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled. A probable stored cross-site scripting vulnerability is present in Formcreator 2.13.5 and prior via the use of the use of FULLFORM for rendering. This could result in...

6.1CVSS6.7AI score0.00553EPSS
Exploits1References1
Redos
Redos
added 2024/08/12 12:0 a.m.12 views

ROS-20240812-02

A vulnerability in the GLPI plugin that allows the creation of custom Formcreator forms is related to the the use of FULLFORM for rendering. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary javascript code...

6.1CVSS7.7AI score0.00553EPSS
Exploits1
NVD
NVD
added 2023/05/31 6:15 p.m.10 views

CVE-2023-33971

Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled. A probable stored cross-site scripting vulnerability is present in Formcreator 2.13.5 and prior via the use of the use of FULLFORM for rendering. This could result in...

6.1CVSS6.4AI score0.00553EPSS
Exploits1References1
Prion
Prion
added 2023/05/31 6:15 p.m.10 views

Cross site scripting

Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled. A probable stored cross-site scripting vulnerability is present in Formcreator 2.13.5 and prior via the use of the use of FULLFORM for rendering. This could result in...

4.9CVSS5.8AI score0.00553EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2023/05/31 5:56 p.m.15 views

CVE-2023-33971 Formcreator vulnerable to stored XSS from ##FULLFORM##

Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled. A probable stored cross-site scripting vulnerability is present in Formcreator 2.13.5 and prior via the use of the use of FULLFORM for rendering. This could result in...

6.1CVSS5.8AI score0.00553EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/05/31 5:56 p.m.14 views

CVE-2023-33971 Formcreator vulnerable to stored XSS from ##FULLFORM##

Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled. A probable stored cross-site scripting vulnerability is present in Formcreator 2.13.5 and prior via the use of the use of FULLFORM for rendering. This could result in...

6.1CVSS6.5AI score0.00553EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/05/31 5:56 p.m.8 views

CVE-2023-33971 Formcreator vulnerable to stored XSS from ##FULLFORM##

Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled. A probable stored cross-site scripting vulnerability is present in Formcreator 2.13.5 and prior via the use of the use of FULLFORM for rendering. This could result in...

6.1CVSS6.7AI score0.00553EPSS
Exploits1References1
CVE
CVE
added 2023/05/31 5:56 p.m.56 views

CVE-2023-33971

CVE-2023-33971 concerns the Formcreator GLPI plugin (versions 2.13.5 and earlier) with a reported stored cross-site scripting vulnerability. The issue arises from rendering with the ##FULLFORM## mechanism, which could allow arbitrary JavaScript execution in an admin/tech context. No patch is indi...

6.1CVSS5.9AI score0.00553EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2023/05/31 12:0 a.m.2 views

Formcreator 跨站脚本漏洞

Formcreator is a plugin that allows the creation of easily accessible custom forms. A security vulnerability exists in Formcreator 2.13.5 and prior versions, which stems from a stored cross-site scripting XSS vulnerability that can be exploited by an attacker to execute arbitrary javascript code...

6.1CVSS5.8AI score0.00553EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/05/31 12:0 a.m.2 views

PT-2023-24611 · Unknown +1 · Formcreator +1

Name of the Vulnerable Software and Affected Versions: Formcreator versions 2.13.5 and prior Description: A stored cross-site scripting issue is present in the Formcreator plugin, potentially allowing arbitrary javascript code execution in an admin or tech context. This is due to the use of...

6.1CVSS6.5AI score0.00553EPSS
Exploits1References4
Rows per page
Query Builder