Vulnerabilities > Jqueryform > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-02-16 CVE-2022-24981 Cross-site Scripting vulnerability in Jqueryform
A reflected cross-site scripting (XSS) vulnerability in forms generated by JQueryForm.com before 2022-02-05 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to admin.php.
network
low complexity
jqueryform CWE-79
6.1
2022-02-16 CVE-2022-24982 Insufficiently Protected Credentials vulnerability in Jqueryform
Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to access the cleartext credentials of all other form users.
network
low complexity
jqueryform CWE-522
6.5
2018-07-13 CVE-2016-9493 Cross-site Scripting vulnerability in Jqueryform PHP Formmail Generator 20161206
The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting.
network
low complexity
jqueryform CWE-79
6.1