Lucene search
+L

175 matches found

attackerkb
attackerkb
•added 2026/01/23 2:29 p.m.•16 views

CVE-2026-24595

Missing Authorization vulnerability in zohocrm Zoho CRM Lead Magnet zoho-crm-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho CRM Lead Magnet: from n/a through = 1.8.1.5...

5.4CVSS6AI score0.00295EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/22 5:16 p.m.•26 views

CVE-2025-70899

PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery CSRF protection on all administrative forms. An attacker can perform unauthorized actions on behalf of authenticated administrators by tricking them into visiting a malicious webpage...

6.5CVSS0.00176EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/07 9:13 a.m.•30 views

CVE-2024-2772

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in all versions up to, and including, 5.1.13 due to insufficient input sanitization and output escaping. This makes it...

9.8CVSS6.1AI score0.02333EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:09 a.m.•23 views

CVE-2024-2771

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all versions up to, and including, 5.1.16. This makes ...

9.8CVSS5.8AI score0.02333EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/17 12:00 a.m.•20 views

WordPress plugin Ninja Forms has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.5CVSS5.9AI score0.00442EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/10 12:00 a.m.•19 views

PT-2025-50411

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.7AI score0.0025EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/10 12:00 a.m.•19 views

Adobe Experience Manager Cross-Site Script Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The solution supports mobile content management, marketing and sales campaign management, and multi-site management. A...

5.4CVSS5.7AI score0.0025EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/11/04 9:29 a.m.•395 views

Exploit for Incorrect Authorization in Adobe Experience_Manager_Forms

CVE-2025-54253: Inside the Adobe AEM-Forms Zero-Day — What Pen...

10CVSS9.1AI score0.88262EPSS
SaveExploits7
CISA KEV Catalog
CISA KEV Catalog
•added 2025/10/15 12:00 a.m.•70 views

Adobe Experience Manager Forms Code Execution Vulnerability

Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution...

10CVSS9.2AI score0.88262EPSS
SaveIn wildExploits7
osv_ghsa
osv_ghsa
•added 2025/10/08 3:32 p.m.•33 views

GHSA-378F-8Q54-3FQX Liferay Portal is vulnerable to Stored XSS through Forms text type field

Stored cross-site scripting XSS vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and 7.3 GA through update 35 allows remote attackers to inject arbitrary web script or HTML via a...

5.1CVSS5.7AI score0.00243EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/08 1:11 p.m.•34 views

CVE-2025-43830

Stored cross-site scripting XSS vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and 7.3 GA through update 35 allows remote attackers to inject arbitrary web script or HTML via a...

5.1CVSS0.00243EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2006-5345

Malware in sbrugna...

10CVSS6.4AI score0.02872EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2012-0111

Malware in sbrugna...

4.3CVSS5.8AI score0.01114EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2020-17164

Malware in sbrugna...

5.8CVSS6.1AI score0.02102EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2020-30514

Malware in sbrugna...

9CVSS6.8AI score0.01884EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2019-12525

Malware in sbrugna...

6.1CVSS7AI score0.00986EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2006-5350

Malware in sbrugna...

10CVSS6.4AI score0.02872EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-2145

Malware in sbrugna...

7.8CVSS7.4AI score0.09065EPSS
SaveExploits5References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2008-7193

Malware in sbrugna...

4.3CVSS6.4AI score0.04973EPSS
SaveExploits1References12
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2023-32417

Malicious code in bioql PyPI...

9.8CVSS8.8AI score0.00616EPSS
SaveExploits0References1
Rows per page
Query Builder