CVE-2018-7747

Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web…

published April 20, 2018

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a greeting message, (2) the email transaction log, or (3) an imported form.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04403 · 91.2th percentile
Published
2018-04-20T21:00Z
EPSS history
Timeline
  • 20 APR 21:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web…
    cvelistv5