The PS PHPCaptcha WP plugin before v1.2.0 for WordPress mishandles sanitization of input...
9.8CVSS
9.5AI Score
0.002EPSS
HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example_form.ajax.php or...
6.1CVSS
6.4AI Score
0.002EPSS