Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: reputeinfosystems Component: Arforms Form Builder Clear all filters
TI-2024-36312 CVE-2024-54223 · GHSA-r84c-c4fr-6449

WordPress ARForms plugin <= 1.7.1 - HTML Injection vulnerability

Priority LOW 33

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in reputeinfosystems ARForms Form Builder arforms-form-builder allows Code Injection.This issue affects ARForms Form Builder: fr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00332 Published 2024-12-09 No fix listed CWE-80
TI-2024-25226 CVE-2024-37920 · GHSA-5pxw-5627-vff9

WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Repute InfoSystems ARForms Form Builder allows Reflected XSS.This issue affects ARForms Form Builder: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-07-20 No fix listed CWE-79
TI-2023-06235 CVE-2023-6828 · GHSA-48hh-4r7c-cr86

ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url

Priority LOW 38

The Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ arf_http_referrer_url’ parameter in all versions up to, and in…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00374 Published 2024-01-11 No fix listed CWE-79