CVE-2026-4160: Authorization Bypass Through User-Controlled Key

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference via the 'submissionid' parameter in versions up to, and including, 6.1.21. This is due to missing authorization and ownership validatio...

CVE-2025-13748: Authorization Bypass Through User-Controlled Key

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.1.7 via the 'submissionid' parameter due to missing validation on a user controlled key within...

EUVD-2021-24617

Malware in sbrugna...

CVE-2021-38144

An issue was discovered in Form Tools through 3.0.20. A low-privileged user can trigger Reflected XSS when a viewing a form via the submissionid parameter, e.g., clients/forms/editsubmission.php?formid=1id=1id=XSS...

Form Tools Cross-Site Scripting Vulnerability (CNVD-2023-00372)

A cross-site scripting vulnerability exists in Form Tools 3.0.20 and earlier. An attacker could use the submissionid parameter to trigger a stored cross-site scripting attack when viewing a form...

CVE-2021-38144

An issue was discovered in Form Tools through 3.0.20. A low-privileged user can trigger Reflected XSS when a viewing a form via the submissionid parameter, e.g., clients/forms/editsubmission.php?formid=1&viewid=1&submissionid=XSS...

CVE-2021-38144

An issue was discovered in Form Tools through 3.0.20. A low-privileged user can trigger Reflected XSS when a viewing a form via the submissionid parameter, e.g., clients/forms/editsubmission.php?formid=1&viewid=1&submissionid=XSS...

CVE-2021-38144: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Form Tools through 3.0.20. A low-privileged user can trigger Reflected XSS when a viewing a form via the submissionid parameter, e.g., clients/forms/editsubmission.php?formid=1&viewid=1&submissionid=XSS...