Gravityforms
Approved changes feed: RSS · Atom
cpe:2.3:a:rocketgenius:gravityforms:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Rocketgenius (fbfcd17b-5fcd-59cd-a279-c4f0b735b462) |
|---|---|
| Product | Gravityforms (949f296c-1e8e-54f8-9e5d-3c8231176ace) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-27852 |
vulnerable | 2026-06-08 05:23:53.331396 |
Details available
A stored Cross-Site Scripting (XSS) vulnerability in the survey feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via a textarea field. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).
Published: 2021-01-20T03:11:16.000Z
Updated: 2024-08-04T16:25:43.560Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27851 |
vulnerable | 2026-06-08 05:23:53.331067 |
Details available
Multiple stored HTML injection vulnerabilities in the "poll" and "quiz" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary HTML code via poll or quiz answers. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).
Published: 2021-01-20T03:14:39.000Z
Updated: 2024-08-04T16:25:43.806Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27850 |
vulnerable | 2026-06-08 05:23:53.330466 |
Details available
A stored Cross-Site Scripting (XSS) vulnerability in forms import feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via the import of a GF form. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).
Published: 2021-01-20T03:08:51.000Z
Updated: 2024-08-04T16:25:43.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13764 |
vulnerable | 2026-06-08 05:18:01.063292 |
Details available
common.php in the Gravity Forms plugin before 2.4.9 for WordPress can leak hashed passwords because user_pass is not considered a special case for a $current_user->get($property) call.
Published: 2020-06-02T20:33:11.000Z
Updated: 2024-08-04T12:25:16.516Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.