Vulnerabilities > Jqueryform > PHP Formmail Generator > 2016.12.06

DATE CVE VULNERABILITY TITLE RISK
2018-07-13 CVE-2016-9493 Cross-site Scripting vulnerability in Jqueryform PHP Formmail Generator 20161206
The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting.
network
low complexity
jqueryform CWE-79
6.1
2018-07-13 CVE-2016-9492 Unrestricted Upload of File with Dangerous Type vulnerability in Jqueryform PHP Formmail Generator 20161206
The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous file types.
network
low complexity
jqueryform CWE-434
critical
9.8