Read the docs

vcita

Records39All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

vcita records in CISA KEV

No vcita vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Online Booking & Scheduling Calendar 19 records MEDIUM Crm And Lead Management By Vcita 4 records LOW Online Payments - Get Paid With Paypal, Square & Stripe 3 records LOW Contact Form And Calls To Action By Vcita 2 records LOW Contact Form Builder By Vcita 2 records LOW Event Registration Calendar By Vcita 2 records LOW

Records

2 records in Contact Form Builder By Vcita · all components

TI-2023-02157 CVE-2023-2300 · GHSA-hvfh-qhgx-vqxm

Contact Form Builder by vcita <= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The Contact Form Builder by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 4.9.1 due to insufficient input sanitization and output esca…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00506 Published 2023-06-03 No fix listed CWE-79
Open these records in search →