Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: plugcrux Clear all filters
TI-2026-07823 CVE-2026-8901 · GHSA-mx37-f3jf-xmhw

Integration for Freshsales <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Form Submission Data

Priority LOW 31

The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Submission Data in all versions up to, and including,…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00314 Published 2026-06-06 No fix listed CWE-79