Lucene search
+L

69 matches found

Cvelist
Cvelist
added 2025/04/01 2:51 p.m.23 views

CVE-2025-31793 WordPress Piotnet Forms plugin <= 1.0.30 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in piotnetdotcom Piotnet Forms piotnetforms allows Stored XSS.This issue affects Piotnet Forms: from n/a through = 1.0.30...

5.9CVSS0.00347EPSS
Exploits0References1
CVE
CVE
added 2025/04/01 2:51 p.m.51 views

CVE-2025-31792

CVE-2025-31792 affects the Piotnet Forms WordPress plugin. The initial description indicates an Stored Cross-Site Scripting (XSS) vulnerability due to improper input neutralization during web page generation, affecting Piotnet Forms versions from unspecified start up to 1.0.30. Connected WordPres...

5.9CVSS7.2AI score0.00347EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 2:51 p.m.5 views

CVE-2025-31792 WordPress Piotnet Forms plugin <= 1.0.30 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in piotnetdotcom Piotnet Forms allows Stored XSS. This issue affects Piotnet Forms: from n/a through 1.0.30...

5.9CVSS6.9AI score0.00347EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/01 2:51 p.m.18 views

CVE-2025-31792 WordPress Piotnet Forms plugin <= 1.0.30 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in piotnetdotcom Piotnet Forms piotnetforms allows Stored XSS.This issue affects Piotnet Forms: from n/a through = 1.0.30...

5.9CVSS0.00347EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.5 views

WordPress plugin Piotnet Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.1AI score0.00347EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.6 views

PT-2025-14178 · Unknown · Piotnet Forms

Name of the Vulnerable Software and Affected Versions: Piotnet Forms versions 1.0.0 through 1.0.30 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

5.9CVSS6.2AI score0.00347EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.9 views

PT-2025-14177 · Unknown · Piotnet Forms

Name of the Vulnerable Software and Affected Versions: Piotnet Forms versions 1.0.0 through 1.0.30 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

5.9CVSS6.3AI score0.00347EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.8 views

WordPress plugin Piotnet Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.1AI score0.00347EPSS
Exploits0References2
NVD
NVD
added 2024/06/12 10:15 a.m.29 views

CVE-2023-51413

Missing Authorization vulnerability in Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.29...

5.3CVSS0.00295EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/12 9:13 a.m.31 views

CVE-2023-51413 WordPress Piotnet Forms plugin <= 1.0.29 - Broken Access Control vulnerability

Missing Authorization vulnerability in Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.29...

5.3CVSS0.00295EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/12 9:13 a.m.17 views

CVE-2023-51413 WordPress Piotnet Forms plugin <= 1.0.29 - Broken Access Control vulnerability

Missing Authorization vulnerability in Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.29...

5.3CVSS7.2AI score0.00295EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/06/12 12:0 a.m.8 views

WordPress plugin Piotnet Forms security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.8AI score0.00295EPSS
Exploits0References2
NVD
NVD
added 2024/01/11 9:15 a.m.34 views

CVE-2023-6220

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'piotnetformsajaxformbuilder' function in versions up to, and including, 1.0.28. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

9.8CVSS8.9AI score0.01403EPSS
Exploits0References3
OSV
OSV
added 2024/01/11 9:15 a.m.7 views

CVE-2023-6220

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'piotnetformsajaxformbuilder' function in versions up to, and including, 1.0.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

9.8CVSS7.9AI score0.01403EPSS
Exploits0References2
Prion
Prion
added 2024/01/11 9:15 a.m.21 views

Input validation

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'piotnetformsajaxformbuilder' function in versions up to, and including, 1.0.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

7.5CVSS8.2AI score0.01403EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/11 8:32 a.m.7 views

CVE-2023-6220 Piotnet Forms <= 1.0.28 - Unauthenticated Arbitrary File Upload

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'piotnetformsajaxformbuilder' function in versions up to, and including, 1.0.28. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

8.1CVSS7.9AI score0.01403EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/01/11 8:32 a.m.42 views

CVE-2023-6220 Piotnet Forms <= 1.0.28 - Unauthenticated Arbitrary File Upload

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'piotnetformsajaxformbuilder' function in versions up to, and including, 1.0.28. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

8.1CVSS10AI score0.01403EPSS
Exploits0References3
CVE
CVE
added 2024/01/11 8:32 a.m.94 views

CVE-2023-6220

CVE-2023-6220 concerns the Piotnet Forms WordPress plugin (versions up to and including 1.0.26). The vulnerability arises from insufficient file type validation in the function piotnetforms_ajax_form_builder, allowing unauthenticated attackers to upload arbitrary files to the server, with potenti...

9.8CVSS7.9AI score0.01403EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/11 12:0 a.m.11 views

PT-2024-14900 · WordPress · Piotnet Forms

Name of the Vulnerable Software and Affected Versions: Piotnet Forms plugin for WordPress versions up to, and including, 1.0.26 Description: The issue is related to insufficient file type validation in the piotnetforms ajax form builder function, allowing unauthenticated attackers to upload...

9.8CVSS9.7AI score0.01403EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/01/11 12:0 a.m.5 views

WordPress Plugin Piotnet Forms Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.9AI score0.01403EPSS
Exploits0References3
Rows per page
Query Builder