Lucene search
+L

12138 matches found

osv_cve
osv_cve
•added 2025/03/05 4:15 p.m.•19 views

CVE-2025-22212

A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the submission management area in backend...

2.7CVSS6.5AI score0.00327EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/03/05 2:59 p.m.•17 views

CVE-2025-23904

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rebrandpress Rebrand Fluent Forms rebrand-fluent-forms allows Reflected XSS.This issue affects Rebrand Fluent Forms: from n/a through = 1.0...

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/05 12:00 a.m.•9 views

CVE-2025-22212: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the submission management area in backend...

2.7CVSS6.5AI score0.00327EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2020-12803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an...

6.5CVSS6.2AI score0.01756EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/03 2:15 p.m.•17 views

CVE-2025-23904

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rebrandpress Rebrand Fluent Forms rebrand-fluent-forms allows Reflected XSS.This issue affects Rebrand Fluent Forms: from n/a through = 1.0...

7.1CVSS0.00393EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/03 2:15 p.m.•31 views

CVE-2025-23763

Missing Authorization vulnerability in Alex Volkov WAH Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WAH Forms: from n/a through 1.0...

6.5CVSS0.0054EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•8 views

CVE-2025-23904 WordPress Rebrand Fluent Forms Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rebrandpress Rebrand Fluent Forms rebrand-fluent-forms allows Reflected XSS.This issue affects Rebrand Fluent Forms: from n/a through = 1.0...

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•69 views

CVE-2025-23904

CVE-2025-23904 concerns the WordPress/Rebrand Fluent Forms plugin (versions

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/03 1:30 p.m.•27 views

CVE-2025-23904 WordPress Rebrand Fluent Forms Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rebrandpress Rebrand Fluent Forms rebrand-fluent-forms allows Reflected XSS.This issue affects Rebrand Fluent Forms: from n/a through = 1.0...

7.1CVSS0.00393EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•83 views

CVE-2025-23763

CVE-2025-23763 concerns WordPress WAH Forms plugin

6.5CVSS6AI score0.0054EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•12 views

CVE-2025-23763 WordPress WAH Forms plugin <= 1.0 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Alex Volkov WAH Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WAH Forms: from n/a through 1.0...

6.5CVSS6AI score0.0054EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/03 1:30 p.m.•49 views

CVE-2025-23763 WordPress WAH Forms plugin <= 1.0 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Alex Volkov WAH Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WAH Forms: from n/a through 1.0...

6.5CVSS0.0054EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•6 views

CVE-2025-23763: Missing Authorization

Missing Authorization vulnerability in Alex Volkov WAH Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WAH Forms: from n/a through 1.0...

6.5CVSS6AI score0.0054EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•8 views

PT-2025-9421

Name of the Vulnerable Software and Affected Versions Rebrand Fluent Forms versions 1.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting XSS, specifically Reflected XSS. Recommendations For versions...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•15 views

WordPress plugin WAH Forms has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS5.8AI score0.0054EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•17 views

WordPress plugin Rebrand Fluent Forms has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.2AI score0.00393EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•5 views

CVE-2025-23904: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rebrandpress Rebrand Fluent Forms rebrand-fluent-forms allows Reflected XSS.This issue affects Rebrand Fluent Forms: from n/a through = 1.0...

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•7 views

PT-2025-9409

Name of the Vulnerable Software and Affected Versions WAH Forms versions 1.0 and earlier Description The issue is related to a Missing Authorization vulnerability in Alex Volkov WAH Forms, which allows exploiting incorrectly configured access control security levels. Recommendations For WAH Forms...

6.5CVSS5.9AI score0.0054EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/03/01 5:16 a.m.•26 views

CVE-2025-0469

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slider template data in all versions up to, and including, 1.39.2 due to insufficient input sanitization and output escaping. This makes it possible fo...

6.4CVSS8.5AI score0.00253EPSS
SaveExploits0References1
osv_oesa
osv_oesa
•added 2025/02/28 11:08 a.m.•27 views

OESA-2025-1221 golang security update

. Security Fixes: HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate substantially more...

8.1CVSS6.4AI score0.01888EPSS
SaveExploits0References6
Rows per page
Query Builder