Advisories · Technology
Kali Forms — Contact Form & Drag-and-Drop Builder.
Every CVE that names Kali Forms — Contact Form & Drag-and-Drop Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Kali Forms < 2.4.29 - Author+ Stored XSS via Button Click Action
- Kali Forms — Contact Form & Drag-and-Drop Builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Kali Forms < 2.4.30 - Subscriber+ Email Sending and Sender Spoofing
- Kali Forms — Contact Form & Drag-and-Drop Builder
- Broken access control
- CVSS 4.3 Medium
Kali Forms < 2.4.30 - Subscriber+ User Email Address Disclosure
- Kali Forms — Contact Form & Drag-and-Drop Builder
- Information disclosure
- CVSS 5.5 Medium
Kali Forms < 2.4.17 - Contributor+ Arbitrary Post Metadata Disclosure via IDOR
- Kali Forms — Contact Form & Drag-and-Drop Builder
- Broken access control
- CVSS 5.3 Medium
Kali Forms < 2.4.17 - Unauthenticated Media Upload
- Kali Forms — Contact Form & Drag-and-Drop Builder
- Unrestricted file upload
- CVSS 5.9 Medium
Kali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field Caption
- Kali Forms — Contact Form & Drag-and-Drop Builder