Lucene search

Callrail Security Vulnerabilities

cve

CVE-2023-5051

The CallRail Phone Call Tracking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'callrail_form' shortcode in versions up to, and including, 0.5.2 due to insufficient input sanitization and output escaping on the 'form_id' user supplied attribute. This makes it possible...

6.4CVSS

5.2AI Score

0.001EPSS

2023-10-27 04:15 AM

cve

CVE-2022-36796

Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in CallRail, Inc. CallRail Phone Call Tracking plugin <= 0.4.9 at...

6.1CVSS

6.1AI Score

0.001EPSS

2022-09-01 05:15 PM