Orange-Form Project Orange-Form
2 CVEs affecting Orange-Form Project Orange-Form. Latest disclosed: 2022-02-28. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24704 | High | 8.8 | 2022-02-28 | In the Orange Form WordPress plugin through 1.0, the process_bulk_action() function in "admin/orange-form-email.php" performs an unprepared SQL query with an u… |
CVE-2021-24688 | Medium | 4.3 | 2022-02-28 | The Orange Form WordPress plugin through 1.0.1 does not have any authorisation and CSRF checks in all of its AJAX calls, for example the or_delete_filed one wh… |