Activecampaign

Activecampaign

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2025-32136

  • EPSS 0.33%
  • Veröffentlicht 04.04.2025 16:15:21
  • Zuletzt bearbeitet 23.04.2026 15:28:37

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in activecampaign ActiveCampaign activecampaign-subscription-forms allows Stored XSS.This issue affects ActiveCampaign: from n/a through <= 8.1.16.

9.8

CVE-2024-32430

  • EPSS 0.35%
  • Veröffentlicht 15.04.2024 08:15:15
  • Zuletzt bearbeitet 28.04.2026 19:24:37

Server-Side Request Forgery (SSRF) vulnerability in ActiveCampaign.This issue affects ActiveCampaign: from n/a through 8.1.14.

5.4

CVE-2023-0233

Exploit
  • EPSS 0.46%
  • Veröffentlicht 15.05.2023 13:15:09
  • Zuletzt bearbeitet 14.01.2025 19:15:28

The ActiveCampaign WordPress plugin before 8.1.12 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Store...

4.3

CVE-2021-24133

Exploit
  • EPSS 0.47%
  • Veröffentlicht 18.03.2021 15:15:14
  • Zuletzt bearbeitet 21.11.2024 05:52:25

Lack of CSRF checks in the ActiveCampaign WordPress plugin, versions before 8.0.2, on its Settings form, which could allow attacker to make a logged-in administrator change API Credentials to attacker's account.