Approved changes feed: RSS · Atom

cpe:2.3:a:syed_balkhi:wpforms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSyed Balkhi (5bb5e4d4-016a-5986-95a4-334e37046375)
ProductWpforms (196da8bd-4913-58ad-a5b9-8501cc8dbf5d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36919 vulnerable 2026-06-03 14:42:40.303417 WPForms 1.7.8 - Cross-Site Scripting (XSS)
MEDIUM (6.1)
WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser.
Published: 2026-01-13T22:55:56.024Z
Updated: 2026-05-24T01:36:51.999Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.