Fullworks

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Fullworks records in CISA KEV

No Fullworks vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Quick Contact Form · all components

TI-2023-09684 CVE-2023-23885 · GHSA-c49g-4rj2-vxxp

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00386 Published 2023-04-07 No fix listed CWE-79

TI-2022-23646 CVE-2022-47608 · GHSA-29wx-wghr-g778

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-04-25 No fix listed CWE-79