Projectcaruso
4 CVEs across 2 Projectcaruso products. Browse Projectcaruso vulnerabilities, severities, and proof-of-concept exploits.
Projectcaruso products with known CVEs
Projectcaruso CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-7692 | Medium | 6.1 | 2024-09-02 | The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-S… |
CVE-2024-7691 | Medium | 6.1 | 2024-09-02 | The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Sc… |
CVE-2024-3966 | Medium | 6.1 | 2024-06-14 | The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripti… |
CVE-2024-3965 | Medium | 5.4 | 2024-06-14 | The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in ad… |