Lucene search
+L

6 matches found

OSV
OSV
•added 2026/01/13 11:15 p.m.•14 views

CVE-2020-36919

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser...

6.1CVSS5.9AI score0.00366EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/01/13 10:55 p.m.•5 views

CVE-2020-36919 WPForms 1.7.8 - Cross-Site Scripting (XSS)

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser...

6.1CVSS6.2AI score0.00366EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•28 views

PT-2026-2357

Name of the Vulnerable Software and Affected Versions WPForms version 1.7.8 Description The software contains a cross-site scripting issue in the slider import search feature and tab parameter. An attacker can inject malicious scripts through the /ListTable.php endpoint to execute arbitrary...

6.1CVSS6AI score0.00366EPSS
SaveExploits1References5
NVD
NVD
•added 2022/04/19 9:15 p.m.•34 views

CVE-2022-28222

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php...

6.1CVSS0.02931EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/19 12:00 a.m.•4 views

CVE-2022-28222: Improper Neutralization of Input During Web Page Generation

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php...

6.1CVSS6.4AI score0.02931EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/19 12:00 a.m.•3 views

CVE-2022-28221: Improper Neutralization of Input During Web Page Generation

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php...

6.1CVSS6.4AI score0.02396EPSS
SaveExploits2References3
Rows per page
Query Builder