Cformsii Project 9 CVEs across 1 Cformsii Project products. Browse Cformsii Project vulnerabilities, severities, and proof-of-concept exploits.
Cformsii Project products with known CVEs Cformsii Project CVEs — newest first CVE Severity Score Published Summary CVE-2023-52203Medium 5.92024-01-08 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bastian Germann cformsII allows Stored XSS… CVE-2023-25449Medium 4.32023-06-15 Cross-Site Request Forgery (CSRF) vulnerability in Oliver Seidel, Bastian Germann cformsII plugin <= 15.0.4 versions. CVE-2014-10393Medium 6.12019-08-22 The cforms2 plugin before 10.5 for WordPress has XSS. CVE-2014-10392Medium 6.12019-08-22 The cforms2 plugin before 10.2 for WordPress has XSS. CVE-2017-18570Critical 9.82019-08-22 The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries. CVE-2015-9333Critical 9.82019-08-22 The cforms2 plugin before 14.6.10 for WordPress has SQL injection. CVE-2017-18559Medium 6.12019-08-21 The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues. CVE-2014-10377Medium 6.12019-08-21 The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php. CVE-2019-15238High 8.82019-08-20 The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.