Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WS Form LITE – Drag & Drop Contact Form Builder for WordPress, WS Form Pro 1.8.176 Clear all filters
TI-2022-07951 CVE-2022-23988 · GHSA-j8j2-69r7-q88p

WS Form < 1.8.176 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 32

The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape submitted form data, allowing unauthenticated attacker to submit XSS payloads which will get executed when a privileged user will view…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02231 Published 2022-02-28 Fixed in 1.8.176 CWE-79
TI-2022-07950 CVE-2022-23987 · GHSA-4393-ch2m-6pmx

WS Form < 1.8.176 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape their Form Name, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capabilit…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-02-28 Fixed in 1.8.176 CWE-79