Accesspressthemes

Form Store To Db

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2021-24867

Exploit
  • EPSS 6.69%
  • Published 21.02.2022 11:15:08
  • Last modified 21.11.2024 05:53:55

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not....

6.1

CVE-2021-25107

Exploit
  • EPSS 12.13%
  • Published 14.02.2022 12:15:15
  • Last modified 21.11.2024 05:54:21

The Form Store to DB WordPress plugin before 1.1.1 does not sanitise and escape parameter keys before outputting it back in the created entry, allowing unauthenticated attacker to perform Cross-Site Scripting attacks against admin