Crm Perks Forms Security Vulnerabilities and Issues — Crm Perks Forms CVE List

Lucene search

CrmperksCrm Perks Forms

8 matches found

CVE•added 2024/02/01 11:15 a.m.•76 views

CVE-2023-51536

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms – WordPress Form Builder allows Stored XSS.This issue affects CRM Perks Forms – WordPress Form Builder: from n/a through 1.1.2.

5.9CVSS5.1AI score0.00058EPSS

CVE•added 2023/01/14 11:15 a.m.•55 views

CVE-2022-38467

Reflected Cross-Site Scripting (XSS) vulnerability in CRM Perks Forms – WordPress Form Builder

6.1CVSS6AI score0.0815EPSS

CVE•added 2024/03/29 2:15 p.m.•54 views

CVE-2024-30499

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.

8.8CVSS8.8AI score0.00284EPSS

CVE•added 2024/03/29 2:15 p.m.•50 views

CVE-2024-30498

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.

10CVSS9.7AI score0.00223EPSS

CVE•added 2024/03/29 5:15 p.m.•46 views

CVE-2024-30446

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms allows Stored XSS.This issue affects CRM Perks Forms: from n/a through 1.1.4.

6.5CVSS6.7AI score0.00114EPSS

CVE•added 2024/11/01 3:15 p.m.•38 views

CVE-2024-37463

Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.

9.8CVSS5.3AI score0.00167EPSS

CVE•added 2023/05/31 4:15 a.m.•37 views

CVE-2023-2836

The CRM Perks Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and ab...

4.8CVSS4.9AI score0.0011EPSS

CVE•added 2024/08/06 2:15 a.m.•19 views

CVE-2024-7484

The CRM Perks Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'handle_uploaded_files' function in versions up to, and including, 1.1.3. This makes it possible for authenticated attackers with administrator-level capabilities or above, to...

7.2CVSS7.3AI score0.05623EPSS