Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Keap Component: Official Opt-in Forms Clear all filters
TI-2023-28620 CVE-2023-52192 · GHSA-v5vm-g52c-4v89

WordPress Keap Official Opt-in Forms Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Keap Keap Official Opt-in Forms allows Stored XSS.This issue affects Keap Official Opt-in Forms: from n/a through 1.0.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00322 Published 2024-02-01 No fix listed CWE-79
TI-2023-06344 CVE-2023-6941 · GHSA-5qcx-4qww-3whv

Keap Official Opt-in Forms <= 1.0.11 - Admin+ Stored XSS

Priority LOW 22

The Keap Official Opt-in Forms WordPress plugin through 1.0.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even w…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00402 Published 2024-01-15 No fix listed CWE-79