Lucene search
K

8173 matches found

CVE
CVE
added 2023/01/14 10:14 a.m.76 views

CVE-2022-38467

CVE-2022-38467 affects the WordPress CRM Perks Forms plugin (versions

6.1CVSS6AI score0.0081EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/01/14 10:14 a.m.19 views

CVE-2022-38467 WordPress CRM Perks Forms Plugin <= 1.1.0 is vulnerable to Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability in CRM Perks Forms – WordPress Form Builder = 1.1.0 ver...

6.1CVSS6.1AI score0.0081EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/01/14 12:0 a.m.3 views

WordPress plugin CRM Perks Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.1CVSS6AI score0.0081EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/01/14 12:0 a.m.4 views

PT-2023-7913 · WordPress · Crm Perks Forms

Name of the Vulnerable Software and Affected Versions: CRM Perks Forms – WordPress Form Builder versions prior to 1.1.0 Description: The issue is related to the lack of protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack. This can be...

6.4CVSS6AI score0.0081EPSS
Exploits0References4
wpexploit
wpexploit
added 2023/01/13 12:0 a.m.99 views

Happyforms < 1.22.0 - Contributor+ Stored XSS

The plugin does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Exploit Additional CSS classes for "Forms" Gutenberg...

5.4CVSS0.3AI score0.00496EPSS
Exploits2
VulnCheck KEV
VulnCheck KEV
added 2023/01/10 12:0 a.m.2 views

VulnCheck KEV: CVE-2023-2877

The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-ons. This allows a user with a role as low as Subscriber to install and activate arbitrary plugins of arbitrary versions from the...

8.8CVSS7.4AI score0.22274EPSS
Exploits3References1
Positive Technologies
Positive Technologies
added 2023/01/03 12:0 a.m.5 views

PT-2023-3407 · Django +6 · Django +6

Name of the Vulnerable Software and Affected Versions: Django versions 3.2 through 3.2.18 Django versions 4.0 through 4.1.8 Django versions 4.2 through 4.2.0 Description: The issue is related to insufficient input validation in the forms.FileField and forms.ImageField components of the Django web...

10CVSS6.4AI score0.87218EPSS
Exploits29References127
CNVD
CNVD
added 2022/12/20 12:0 a.m.18 views

Adobe Experience Manager Access Control Error Vulnerability (CNVD-2023-54547)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the United States of America Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management...

4.3CVSS6.7AI score0.00922EPSS
Exploits0References1
OSV
OSV
added 2022/12/19 2:15 p.m.2 views

CVE-2022-4024

The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users along with their posts...

6.5CVSS5.9AI score0.00334EPSS
Exploits2References1
NVD
NVD
added 2022/12/19 2:15 p.m.20 views

CVE-2022-4024

The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users along with their posts...

6.5CVSS0.00334EPSS
Exploits2References1
Prion
Prion
added 2022/12/19 2:15 p.m.20 views

Cross site request forgery (csrf)

The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users along with their posts...

4.3CVSS6.6AI score0.00334EPSS
Exploits2References1Affected Software1
CVE
CVE
added 2022/12/19 1:41 p.m.57 views

CVE-2022-4024

The CVE-2022-4024 issue affects the Registration Forms WordPress plugin prior to version 3.8.1.3. It allows unauthenticated attackers to delete arbitrary users (and their posts) via an init action handler due to missing authorization checks and CSRF protection. The vulnerability is evidenced acro...

6.5CVSS6.6AI score0.00334EPSS
Exploits2References1Affected Software1
CNVD
CNVD
added 2022/12/19 12:0 a.m.23 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2022-91148)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.5AI score0.0048EPSS
Exploits0References1
CNVD
CNVD
added 2022/12/19 12:0 a.m.19 views

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2022-91149)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.5AI score0.0048EPSS
Exploits0References1
CNVD
CNVD
added 2022/12/19 12:0 a.m.24 views

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2022-91151)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.5AI score0.0048EPSS
Exploits0References1
CNVD
CNVD
added 2022/12/19 12:0 a.m.17 views

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2022-91152)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.5AI score0.0051EPSS
Exploits0References1
CNVD
CNVD
added 2022/12/19 12:0 a.m.16 views

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2022-91157)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.5AI score0.0048EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/12/19 12:0 a.m.4 views

WordPress plugin Registration Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

6.5CVSS6.6AI score0.00334EPSS
Exploits2References2
CNVD
CNVD
added 2022/12/19 12:0 a.m.23 views

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2022-91153)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.5AI score0.0048EPSS
Exploits0References1
CNVD
CNVD
added 2022/12/19 12:0 a.m.23 views

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2022-91155)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.5AI score0.0048EPSS
Exploits0References1
Rows per page
Query Builder