Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: bannersky Component: Bsk Forms Blacklist Clear all filters
TI-2023-05510 CVE-2023-5980 · GHSA-vp7j-cfrc-8499

BSK Forms Blacklist < 3.7 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The BSK Forms Blacklist WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unf…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00379 Published 2023-12-26 Fixed in 3.7 CWE-79
TI-2023-14650 CVE-2023-30872 · GHSA-36cp-3699-pj66

WordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BannerSky BSK Forms Blacklist.This issue affects BSK Forms Blacklist: from n/a through 3.6.2.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00627 Published 2023-12-20 No fix listed CWE-89