Lucene search
+L

13 matches found

NVD
NVD
•added 2026/08/07 5:16 a.m.•19 views

CVE-2026-12801

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Range Slider 'data-label' and 'data-separator' attributes in all versions up to, and including, 3.5.43 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS0.00261EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/07 4:25 a.m.•23 views

EUVD-2026-54365

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Range Slider 'data-label' and 'data-separator' attributes in all versions up to, and including, 3.5.43 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS6.1AI score0.00261EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/07 4:25 a.m.•21 views

CVE-2026-12801

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Range Slider 'data-label' and 'data-separator' attributes in all versions up to, and including, 3.5.43 due to insufficient input sanitization and output escaping. This makes it possible f...

6.4CVSS6.1AI score0.00261EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/11/07 3:54 p.m.•13 views

CVE-2025-49905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue affects Range Slider Addon for Gravity Forms: from n/a through = 1.1.6...

7.1CVSS6.4AI score0.00228EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/06 4:15 p.m.•12 views

CVE-2025-49905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue affects Range Slider Addon for Gravity Forms: from n/a through = 1.1.6...

7.1CVSS0.00228EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/06 3:53 p.m.•23 views

CVE-2025-49905

CVE-2025-49905 concerns the WordPress plugin Range Slider Addon for Gravity Forms (Plugin: range-slider-addon-for-gravity-forms) with an improper input neutralization that enables a Reflected XSS. Affected versions are Range Slider Addon for Gravity Forms

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/06 3:53 p.m.•13 views

EUVD-2025-38007

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue affects Range Slider Addon for Gravity Forms: from n/a through = 1.1.6...

5.9AI score0.00228EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/06 3:53 p.m.•5 views

CVE-2025-49905 WordPress Range Slider Addon for Gravity Forms plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue affects Range Slider Addon for Gravity Forms: from n/a through = 1.1.6...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/06 3:53 p.m.•22 views

CVE-2025-49905 WordPress Range Slider Addon for Gravity Forms plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue affects Range Slider Addon for Gravity Forms: from n/a through = 1.1.6...

7.1CVSS0.00228EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•3 views

CVE-2025-49905: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue affects Range Slider Addon for Gravity Forms: from n/a through = 1.1.6...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•14 views

WordPress plugin Range Slider Addon for Gravity Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL-based...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•18 views

PT-2025-45214

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsCafe Range Slider Addon for Gravity Forms range-slider-addon-for-gravity-forms allows Reflected XSS.This issue affects Range Slider Addon for Gravity Forms: from n/a through = 1.1.6...

6.4AI score0.00228EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/10/27 12:21 p.m.•16 views

WordPress Range Slider Addon for Gravity Forms plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by HunSec in WordPress Plugin Range Slider Addon for Gravity Forms versions = 1.1.6...

6.1CVSS5.9AI score0.00228EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder