Lucene search
+L

8 matches found

OSV
OSV
added 2026/01/13 11:15 p.m.6 views

CVE-2020-36919

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser...

6.1CVSS5.9AI score0.00307EPSS
Exploits1References3
NVD
NVD
added 2026/01/13 11:15 p.m.6 views

CVE-2020-36919

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser...

6.1CVSS0.00307EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/01/13 10:55 p.m.4 views

CVE-2020-36919 WPForms 1.7.8 - Cross-Site Scripting (XSS)

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser...

6.1CVSS6.2AI score0.00307EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.7 views

Wordpress plugin WPForms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site...

6.1CVSS5.8AI score0.00307EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.9 views

PT-2026-2357

Name of the Vulnerable Software and Affected Versions WPForms version 1.7.8 Description The software contains a cross-site scripting issue in the slider import search feature and tab parameter. An attacker can inject malicious scripts through the /ListTable.php endpoint to execute arbitrary...

6.1CVSS6AI score0.00307EPSS
Exploits1References5
0day.today
0day.today
added 2022/02/10 12:0 a.m.255 views

WordPress Contact Form Builder 1.6.1 Plugin - Cross Site Scripting Vulnerability

Exploit Title: Wordpress Plugin Contact Form Builder 1.6.1 - Cross-Site Scripting XSS Author: Milad karimi Software Link: https://wordpress.org/plugins/contact-forms-builder/ Version: 1.6.1 Tested on: Windows 11 CVE: N/A 1. Description: This plugin creates a Contact Form Builder from any post...

7.1AI score
Exploits0
OSV
OSV
added 2021/08/02 11:15 a.m.5 views

CVE-2021-24488

The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues...

6.1CVSS6.4AI score0.11241EPSS
Exploits5References1
CNNVD
CNNVD
added 2021/08/02 12:0 a.m.9 views

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Post Grid plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress Po...

6.1CVSS5.3AI score0.11241EPSS
Exploits5References3
Rows per page
Query Builder