Jqueryform

10 CVEs across 2 Jqueryform products. Browse Jqueryform vulnerabilities, severities, and proof-of-concept exploits.

Jqueryform products with known CVEs

ProductCVEs
Jqueryform5
PHP Formmail Generator5
Jqueryform CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-24985High8.82022-02-16Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of ot…
CVE-2022-24984Critical9.82022-02-16Forms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow remote unauthenticated attackers to upload executable files an…
CVE-2022-24983High7.52022-02-16Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained…
CVE-2022-24982Medium6.52022-02-16Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to access the cleartext credentials of all other form users. admin.p…
CVE-2022-24981Medium6.12022-02-16A reflected cross-site scripting (XSS) vulnerability in forms generated by JQueryForm.com before 2022-02-05 allows remote attackers to inject arbitrary web scr…
CVE-2016-9493Medium6.12018-07-13The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In the generated form.lib.php file, upload…
CVE-2016-9492Critical9.82018-07-13The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous file types. In the generated form.lib…
CVE-2016-9484High7.52018-07-13The generated PHP form code does not properly validate user input folder directories, allowing a remote unauthenticated attacker to perform a path traversal an…
CVE-2016-9483Critical9.82018-07-13The PHP form code generated by PHP FormMail Generator deserializes untrusted input as part of the phpfmg_filman_download() function. A remote unauthenticated a…
CVE-2016-9482Critical9.82018-07-13Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by navigatin…