Formspree Cross-Site Scripting Vulnerability

Formspree is an open source tool for sending emails in web pages. A cross-site scripting vulnerability exists in the templates/forms/thanks.html page in versions of Formspree prior to 2018-01-23. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Design/Logic Flaw

templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the next parameter...

CVE-2018-6354

templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the next parameter...

CVE-2018-6354: Improper Neutralization of Input During Web Page Generation

templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the next parameter...

PT-2018-17497

Name of the Vulnerable Software and Affected Versions Formspree before 2018-01-23 Description The issue is related to an XSS problem in the templates/forms/thanks.html file, specifically concerning the next parameter. Recommendations For versions prior to 2018-01-23, update to a version released...