Vulnerabilities

TI-2016-07759 CVE-2016-9493 · GHSA-597c-6vf9-vpc4

PHP forms generated using the PHP FormMail Generator are vulnerable to stored cross-site scripting

LOW 30

The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0151 Published 2018-07-13 Fixed in 17/12/2016 CWE-80

TI-2016-07758 CVE-2016-9492 · GHSA-2wvx-75wc-hc4w

MEDIUM 48

The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous file types.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03332 Published 2018-07-13 Fixed in 17/12/2016 CWE-434