IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
5.8Media

CVE-2025-5921SureForms < 1.7.2 - Reflected XSS

SureForms Publicada: (hace 1 año)

Descripción

The SureForms WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both authenticated and unauthenticated users.

Debilidad (CWE): CWE-79

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
brainstormforce sureforms < 1.7.2
— SureForms < 1.7.2

Referencias y parches

Coincidencias CPE (NVD) (1)
  • cpe:2.3:a:brainstormforce:sureforms:*:*:*:*:*:wordpress:*:* < 1.7.2

CVE recientes del mismo producto — WordPress plugins & themes

Sin puntuación
CVE-2026-125711

Trustindex Review Widget Plugins < 14.3 - Editor+ Stored XSS via Business Name

Widgets for Google Reviews; WP Tripadvisor Review Widgets; Widgets for Booking.com Reviews; Widgets for Reviews & Recommendations

The Widgets for Google Reviews WordPress plugin before 14.3, WP Tripadvisor Review Widgets WordPress plugin before 14.3, Widgets for Booking.com Reviews WordPress plugin before 14.3, Widgets for Reviews & Recommendations WordPress plugin before 14.3, Widgets …