cbcvebase.

Basixonline Nex-Forms vulnerabilities

21 known vulnerabilities affecting basixonline/nex-forms.

Total CVEs
21
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH7MEDIUM13

Vulnerabilities

Page 2 of 2
CVE-2021-24705P4MEDIUMCVSS 4.8≤ 7.9.42021-12-13
CVE-2021-24705 [MEDIUM] CWE-79 CVE-2021-24705: The NEX-Forms WordPress plugin before 8.4.3 does not have CSRF checks in place when editing a form, The NEX-Forms WordPress plugin before 8.4.3 does not have CSRF checks in place when editing a form, and does not escape some of its settings as well as form fields before outputting them in attributes. This could allow attackers to make a logged in admin edit arbitrary forms with Cross-Site Scripting payloads in them
nvd
← Previous2 / 2
Basixonline Nex-Forms vulnerabilities | cvebase