PRODUCT PROFILE

crm_perks_forms

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

严重CVE-2024-304982026/05/05

CRM Perks Forms <= 1.1.4 - SQL Injection

CRM Perks CRM Perks Forms (affected versions 1.1.4 and earlier) contains a SQL injection caused by improper neutralization of special elements used in an SQL command, letting attackers execute arbitrary SQL commands, exploit requires user interaction.

crm_perks_formsPoC 已收录

CVSS—

中危CVE-2022-384672023/01/14

CRM Perks Forms < 1.1.1 - Cross Site Scripting

The plugin does not sanitise and escape some parameters from a sample file before outputting them back in the page, leading to Reflected Cross-Site Scripting

crm_perks_formsPoC 已收录

CVSS6.1EPSS 8.2%