Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Fetch Designs Component: Sign-up Sheets Clear all filters
TI-2024-05578 CVE-2024-6020 · GHSA-wwjw-jqq2-7xjv

Sign-up Sheets < 2.2.13 - Reflected XSS

Priority MEDIUM 60

The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter before outputting them back in attributes, which could lead to Reflected Cross-Site…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00391 Published 2024-09-04 Fixed in 2.2.13 CWE-79
TI-2021-06731 CVE-2021-24441 · GHSA-c5xg-pgx2-gmrf

Sign-up Sheets < 1.0.14 - Authenticated CSV Injection

Priority LOW 37

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01308 Published 2021-07-12 Fixed in 1.0.14 CWE-1236
TI-2021-06730 CVE-2021-24440 · GHSA-q7cx-mv5x-6h53

Sign-up Sheets < 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 23

The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-07-12 Fixed in 1.0.14 CWE-79