6 matches found
CVE-2026-103909
The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'arbitrary whichever names the admin bound via url.' parameter in all versions up to, and including, 5.5.1.5 due...
CVE-2026-103909
The Calculated Fields Form – AI Form Builder for WordPress plugin is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) in all versions up to and including 5.5.1.5 . The flaw arises from insufficient input sanitization and output escaping within the arbitrary (whichever names the admin ...
PT-2026-104503
Name of the Vulnerable Software and Affected Versions Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More versions prior to 5.5.1.6 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected...
PT-2020-18367
Name of the Vulnerable Software and Affected Versions PrestaShop module ps facetedsearch versions prior to 3.5.0 Description The issue is related to a reflected XSS with the url name parameter. The problem is fixed in version 3.5.0. Recommendations For PrestaShop module ps facetedsearch versions...
PT-2020-7560
Name of the Vulnerable Software and Affected Versions: Supermicro IPMI versions prior to SMT X9 315 Description: The issue allows authenticated attackers to read arbitrary files. This is achieved via the url name parameter in the url redirect.cgi file. Recommendations: For versions prior to SMT X...
