Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

CVE-2021-24596

youForms for WordPress <= 1.0.5 - Authenticated Stored Cross-Site Scripting

The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowing high privilege users (editors and admins) to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

CVSS 3.1 · 4.8 Medium EPSS 2.8% KEV · Not listed
Vendors
Itservicejung
Products
Youforms-free-for-copecart