Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-07-22	CVE-2024-6243	Cross-site Scripting vulnerability in Ibericode Html Forms The HTML Forms WordPress plugin before 1.3.33 does not sanitize and escape the form message inputs, allowing high-privilege users, such as administrators, to perform Stored Cross-Site Scripting (XSS) attacks even when the unfiltered_html capability is disabled. network low complexity ibericode CWE-79	4.8
2023-12-28	CVE-2023-50836	Unspecified vulnerability in Ibericode Html Forms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ibericode HTML Forms allows Stored XSS.This issue affects HTML Forms: from n/a through 1.3.28. network low complexity ibericode	4.8