TI-2018-05590 CVE-2018-7747 · GHSA-jcxc-mh25-387rMultiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before…Priority LOW 29Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a greeting message,…CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.04403 · Published 2018-04-20 · No fix listed CWE-79