Projectcaruso Flaming Forms
2 CVEs affecting Projectcaruso Flaming Forms. Latest disclosed: 2024-09-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-7692 | Medium | 6.1 | 2024-09-02 | The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-S… |
CVE-2024-7691 | Medium | 6.1 | 2024-09-02 | The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Sc… |