Skip to content

Vendor

calderalabs vulnerabilities

1 published CVE affecting calderalabs, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of calderalabs alerts

Products

Latest calderalabs CVEs

Newest publication first

  1. CVE-2018-7747 Caldera Forms <= 1.5.9.1 - Cross Site Scripting

    Published
    MediumCVSS 4.8 EPSS 4.4% Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a greeting message, (2) the email transaction log, or (3) an imported form.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.