Everest Forms < 1.8.0 - Reflected Cross-Site Scripting issue. Plugin does not escape status parameter, leading to XSS
Reporter | Title | Published | Views | Family All 9 |
---|---|---|---|---|
CNVD | WordPress everest-forms plugin cross-site scripting vulnerability | 26 Dec 202100:00 | – | cnvd |
NVD | CVE-2021-24907 | 21 Dec 202109:15 | – | nvd |
Cvelist | CVE-2021-24907 Everest Forms < 1.8.0 - Reflected Cross-Site Scripting | 21 Dec 202108:45 | – | cvelist |
CVE | CVE-2021-24907 | 21 Dec 202109:15 | – | cve |
Patchstack | WordPress Everest Forms plugin <= 1.7.9 - Reflected Cross-Site Scripting (XSS) vulnerability | 22 Nov 202100:00 | – | patchstack |
wpexploit | Everest Forms < 1.8.0 - Reflected Cross-Site Scripting | 22 Nov 202100:00 | – | wpexploit |
Prion | Cross site scripting | 21 Dec 202109:15 | – | prion |
OSV | CVE-2021-24907 | 21 Dec 202109:15 | – | osv |
OpenVAS | WordPress Contact Form, Drag and Drop Form Builder Plugin < 1.8.0 XSS Vulnerability | 6 May 202200:00 | – | openvas |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo