Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: simpleform Clear all filters
TI-2024-10090 CVE-2024-10884 · GHSA-92r6-576v-g4gg

SimpleForm Contact Form Submissions <= 2.1.0 - Reflected Cross-Site Scripting

Priority LOW 27

The SimpleForm Contact Form Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00406 Published 2024-11-16 No fix listed CWE-79
TI-2024-10089 CVE-2024-10883 · GHSA-wj6r-j2cr-pgm5

SimpleForm – Contact form made simple <= 2.2.0 - Reflected Cross-Site Scripting

Priority LOW 27

The SimpleForm – Contact form made simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2024-11-16 No fix listed CWE-79