Filtered by vendor Deliciousdays Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2014-9473 1 Deliciousdays 1 Cformsii 2024-11-21 N/A
Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the cf_uploadfile2[] parameter, then accessing the file via a direct request to the file in the default upload directory.
CVE-2010-3977 2 Deliciousdays, Wordpress 2 Cforms, Wordpress 2024-11-21 N/A
Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters.