Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Formget Clear all filters
TI-2023-04714 CVE-2023-5125 · GHSA-wwqf-mjrq-5fwm

Contact Form by FormGet <= 5.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The Contact Form by FormGet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formget' shortcode in versions up to, and including, 5.5.5 due to insufficient input sanitization and output escaping on…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0041 Published 2023-09-23 No fix listed CWE-79
TI-2014-06027 CVE-2014-7240 · GHSA-9rp4-56w9-gv8x

Cross-site scripting (XSS) vulnerability in the Easy Contact Form Solution plugin before…

Priority LOW 30

Cross-site scripting (XSS) vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a master_response actio…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0118 Published 2017-10-06 No fix listed CWE-79