PRODUCT PROFILE

Caldera Forms

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危2025/12/18

Caldera Forms <= 1.5.4 - Cross-Site Scripting

The Caldera Forms WordPress plugin before 1.5.4 is affected by an cross-site scripting (XSS) vulnerability. Due to insufficient input sanitization and output escaping, attackers can inject arbitrary JavaScript via form submissions, which is then executed for users viewing entries or confirmations.

Caldera FormsPoC 已收录

CVSS—

中危CVE-2022-08792022/04/18

Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting

The Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the cf-api parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting

caldera_formsPoC 已收录

CVSS6.1