Lucene search
+L

55 matches found

Vulnrichment
Vulnrichment
•added 2025/01/02 12:00 p.m.•10 views

CVE-2023-46610 WordPress Quill Forms plugin <= 3.3.0 - Broken Access Control + CSRF vulnerability

Missing Authorization vulnerability in Mohamed Magdy Quill Forms quillforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quill Forms: from n/a through = 3.3.0...

6.5CVSS7.3AI score0.00382EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/02 12:00 p.m.•34 views

CVE-2023-46610 WordPress Quill Forms plugin <= 3.3.0 - Broken Access Control + CSRF vulnerability

Missing Authorization vulnerability in Mohamed Magdy Quill Forms quillforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quill Forms: from n/a through = 3.3.0...

6.5CVSS0.00382EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•17 views

PT-2025-1517 · Unknown · Quill Forms

Name of the Vulnerable Software and Affected Versions: Quill Forms versions 3.3.0 and earlier Description: The issue is related to missing authorization in Quill Forms, allowing exploitation of incorrectly configured access control security levels. Recommendations: For Quill Forms versions 3.3.0...

6.5CVSS9.4AI score0.00382EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/01/02 12:00 a.m.•15 views

WordPress plugin Quill Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.8AI score0.00382EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•5 views

CVE-2023-46610: Missing Authorization

Missing Authorization vulnerability in Mohamed Magdy Quill Forms quillforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quill Forms: from n/a through = 3.3.0...

6.5CVSS5.9AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/05 2:41 p.m.•51 views

CVE-2024-47393

CVE-2024-47393 describes a stored XSS in the WordPress plugin Quill Forms (versions through 3.7.0). The root cause is improper neutralization of input during web page generation . Affected product: Quill Forms | Quill Forms: from n/a through 3.7.0. The CVSS base score is 6.5 (Medium) per the prov...

6.5CVSS5.9AI score0.00253EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/05 2:41 p.m.•30 views

CVE-2024-47393 WordPress Quill Forms plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohamed Magdy Quill Forms quillforms allows Stored XSS.This issue affects Quill Forms: from n/a through = 3.7.0...

6.5CVSS0.00253EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/05 2:41 p.m.•9 views

CVE-2024-47393 WordPress Quill Forms plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohamed Magdy Quill Forms quillforms allows Stored XSS.This issue affects Quill Forms: from n/a through = 3.7.0...

6.5CVSS5.9AI score0.00253EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/05 12:00 a.m.•16 views

WordPress plugin Quill Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.2AI score0.00253EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/05 12:00 a.m.•15 views

PT-2024-32612 · Unknown · Quill Forms

Name of the Vulnerable Software and Affected Versions: Quill Forms versions through 3.7.0 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-site Scripting XSS vulnerability. This allows for Stored XSS attacks...

6.5CVSS5.5AI score0.00253EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/05 12:00 a.m.•5 views

CVE-2024-47393: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohamed Magdy Quill Forms quillforms allows Stored XSS.This issue affects Quill Forms: from n/a through = 3.7.0...

6.5CVSS5.8AI score0.00253EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/09/30 11:12 a.m.•11 views

WordPress Quill Forms plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Quill Forms versions = 3.7.0...

6.5CVSS6.1AI score0.00253EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/09/30 12:00 a.m.•15 views

WordPress Quill Forms Plugin <= 3.7.0 is vulnerable to Cross Site Scripting (XSS)

Software Quill Forms Type Plugin Vulnerable versions = 3.7.0 Fixed in 3.8.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47393 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 34a391a0728b Credits LVT-tholv2k Required privilege Contributor...

6.5CVSS6.5AI score0.00253EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/11/23 12:00 a.m.•16 views

Quill Forms < 3.4.0 - Cross-Site Request Forgery

Description The Quill Forms | The Best Typeform Alternative | Create Conversational Multi Step Form, Survey, Quiz, Cost Estimation or Donation Form on WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.0. This is due to missing or...

6.7AI score0.00382EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2023/10/24 12:00 a.m.•17 views

WordPress Quill Forms Plugin <= 3.3.0 is vulnerable to Broken Access Control

Software Quill Forms Type Plugin Vulnerable versions = 3.3.0 Fixed in 3.4.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-46610 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID f234d1eb3578 Credits Abdi Pranata Required privilege...

6.5AI score0.00382EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder