8766 matches found
CVE-2025-47456
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Zendesk gf-zendesk allows Phishing.This issue affects WP Gravity Forms Zendesk: from n/a through = 1.1.2...
CVE-2025-47502 WordPress Mollie Forms plugin <= 2.7.12 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nick van Wobbie Mollie Forms mollie-forms allows Stored XSS.This issue affects Mollie Forms: from n/a through = 2.7.12...
CVE-2025-47502 WordPress Mollie Forms plugin <= 2.7.12 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nick van Wobbie Mollie Forms mollie-forms allows Stored XSS.This issue affects Mollie Forms: from n/a through = 2.7.12...
CVE-2025-47502
CVE-2025-47502 concerns Mollie Forms (WordPress plugin) versions up to 2.7.12. Affected: Mollie Forms plugin; root cause: improper neutralization of input during web page generation leading to Stored XSS. Impact per sources: potential for script injection affecting users; CVSSv3.1 base score 6.5 ...
CVE-2025-47456 WordPress WP Gravity Forms Zendesk plugin <= 1.1.2 - Open Redirection Vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Zendesk gf-zendesk allows Phishing.This issue affects WP Gravity Forms Zendesk: from n/a through = 1.1.2...
CVE-2025-47456
CVE-2025-47456 describes an Open Redirect vulnerability in the WordPress plugin WP Gravity Forms Zendesk affecting versions up to and including 1.1.2. The issue enables redirection to untrusted sites, facilitating phishing. Public records indicate the vulnerability has been patched, and multiple ...
CVE-2025-47454 WordPress WP Gravity Forms Dynamics CRM plugin <= 1.1.4 - Open Redirection Vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Dynamics CRM gf-dynamics-crm allows Phishing.This issue affects WP Gravity Forms Dynamics CRM: from n/a through = 1.1.4...
CVE-2025-47454
CVE-2025-47454 is an Open Redirect vulnerability in the WordPress plugin WP Gravity Forms Dynamics CRM (CRM Perks) affecting versions up to and including 1.1.4. The issue enables phishing through malicious redirection to untrusted sites. The vulnerability has been patched; patch status indicates ...
WordPress Mollie Forms plugin <= 2.7.12 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Mollie Forms versions = 2.7.12...
CVE-2025-29573
Cross-Site Scripting XSS vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module...
PT-2025-20126 · Unknown · Mollie Forms
Name of the Vulnerable Software and Affected Versions: Mollie Forms versions through 2.7.12 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicio...
PT-2025-20088 · Unknown · Wp Gravity Forms Dynamics Crm
Name of the Vulnerable Software and Affected Versions: WP Gravity Forms Dynamics CRM versions 1.1.4 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which allows phishing. This can potentially be exploited to...
WordPress plugin Mollie Forms 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...
WordPress plugin WP Gravity Forms Dynamics CRM 输入验证错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...
PT-2025-20090 · Unknown · Wp Gravity Forms Zendesk
Name of the Vulnerable Software and Affected Versions: WP Gravity Forms Zendesk versions 1.1.2 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which can be used for Phishing attacks. Recommendations: For WP...
WordPress plugin WP Gravity Forms Zendesk 输入验证错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the EntriesForm class in the Forms module. An attacker can submit files with malicious filenames and execute arbitrary JavaScript in the browser context of authenticated admins. Note: This is a persistent XS...
Mezzanine CMS Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module...
