Логотип exploitDog
bind:CVE-2025-14803
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-14803

Количество 2

Количество 2

nvd логотип

CVE-2025-14803

около 1 месяца назад

The NEX-Forms WordPress plugin before 9.1.8 does not sanitise and escape some of its settings. The NEX-Forms WordPress plugin before 9.1.8 can be configured in such a way that could allow subscribers to perform Stored Cross-Site Scripting.

CVSS3: 6.8
EPSS: Низкий
github логотип

GHSA-cp58-32qm-mgjw

около 1 месяца назад

The NEX-Forms WordPress plugin before 9.1.8 does not sanitise and escape some of its settings. The NEX-Forms WordPress plugin before 9.1.8 can be configured in such a way that could allow subscribers to perform Stored Cross-Site Scripting.

CVSS3: 6.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-14803

The NEX-Forms WordPress plugin before 9.1.8 does not sanitise and escape some of its settings. The NEX-Forms WordPress plugin before 9.1.8 can be configured in such a way that could allow subscribers to perform Stored Cross-Site Scripting.

CVSS3: 6.8
0%
Низкий
около 1 месяца назад
github логотип
GHSA-cp58-32qm-mgjw

The NEX-Forms WordPress plugin before 9.1.8 does not sanitise and escape some of its settings. The NEX-Forms WordPress plugin before 9.1.8 can be configured in such a way that could allow subscribers to perform Stored Cross-Site Scripting.

CVSS3: 6.8
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу