Vulnerabilities > Crmperks > CRM Perks Forms > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-01 | CVE-2023-51536 | Cross-site Scripting vulnerability in Crmperks CRM Perks Forms 1.1.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms – WordPress Form Builder allows Stored XSS.This issue affects CRM Perks Forms – WordPress Form Builder: from n/a through 1.1.2. | 4.8 |
| 2023-05-31 | CVE-2023-2836 | Cross-site Scripting vulnerability in Crmperks CRM Perks Forms 1.1.1 The CRM Perks Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. | 4.8 |
| 2023-01-14 | CVE-2022-38467 | Cross-site Scripting vulnerability in Crmperks CRM Perks Forms Reflected Cross-Site Scripting (XSS) vulnerability in CRM Perks Forms – WordPress Form Builder <= 1.1.0 ver. | 6.1 |