Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Web-Settler Component: Form Builder Clear all filters
TI-2023-09596 CVE-2023-23796 · GHSA-978x-c366-r634

WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to CSV Injection

Priority MEDIUM 50

Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Contact Forms.This issue affects Form Builder | Create Responsive Contact Forms: from n/a through 1.9.9.0…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00596 Published 2023-11-07 No fix listed CWE-1236
TI-2021-06800 CVE-2021-24513 · GHSA-4c89-7wj7-fm5r

Form Builder < 1.9.8.4 - Authenticated Stored Cross-Site Scripting

Priority LOW 25

The Form Builder | Create Responsive Contact Forms WordPress plugin before 1.9.8.4 does not sanitise or escape its Form Title, allowing high privilege users such as admin to set Cross-Site Scripting payload in them, even…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-06 Fixed in 1.9.8.4 CWE-79