Linksoftwarellc HTML Forms
5 CVEs affecting Linksoftwarellc HTML Forms. Latest disclosed: 2025-04-22. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3689 | High | 7.2 | 2022-11-28 | The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before using it in a SQL statement, leading to a SQL injection expl… |
CVE-2025-46236 | Medium | 6.5 | 2025-04-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Software LLC HTML Forms html-forms allows Stored XSS… |
CVE-2024-6412 | Medium | 6.5 | 2024-07-31 | The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted a… |
CVE-2023-50836 | Medium | 5.9 | 2023-12-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ibericode HTML Forms allows Stored XSS.This issue affects… |
CVE-2024-6243 | Medium | 4.8 | 2024-07-22 | The HTML Forms WordPress plugin before 1.3.33 does not sanitize and escape the form message inputs, allowing high-privilege users, such as administrators, to… |