Calderaforms Caldera Forms
2 CVEs affecting Calderaforms Caldera Forms. Latest disclosed: 2022-04-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0879 | Medium | 6.1 | 2022-04-18 | The Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the cf-api parameter before outputting it back in the response, leading to a Refle… |
CVE-2021-24896 | Medium | 4.8 | 2021-12-13 | The Caldera Forms WordPress plugin before 1.9.5 does not sanitise and escape the Form Name before outputting it in attributes, which could allow high privilege… |