Advanced Forms Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Advanced Forms Project records in CISA KEV

No Advanced Forms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Advanced Forms 1 record MEDIUM

Records

1 record

TI-2021-07172 CVE-2021-24892 · GHSA-p5hv-vfxr-c3g7

Advanced Forms < 1.6.9 - Subscriber+ Arbitrary User Email Address Update via IDOR

MEDIUM 42

Insecure Direct Object Reference in edit function of Advanced Forms (Free & Pro) before 1.6.9 allows authenticated remote attacker to change arbitrary user's email address and request for reset password, which could lead…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01857 Published 2021-11-23 Fixed in 1.6.9 CWE-639

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0