Skip to content

Vendor

deliciousdays vulnerabilities

2 published CVES affecting deliciousdays, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of deliciousdays alerts

Products

Latest deliciousdays CVEs

Newest publication first

  1. CVE-2014-9473 cformsII < 14.8 - Arbitrary File Upload

    Published
    HighCVSS 7.5 EPSS 13.8% Public exploit

    Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the cf_uploadfile2[] parameter, then accessing the file via a dir...

  2. CVE-2010-3977 CformsII <=11.5 - Cross-Site Scripting

    Published
    MediumCVSS 4.3 EPSS 4.2% Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.