Advisories · Technology
Piotnet Forms.
Every CVE that names Piotnet Forms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Piotnet Forms <= 1.0.30 - Unauthenticated Stored XSS via File Upload
- Piotnet Forms
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload
- Piotnet Forms
- Unrestricted file upload
- CVSS 5.3 Medium
WordPress Piotnet Forms plugin <= 1.0.29 - Broken Access Control vulnerability
- Piotnet Forms
- Broken access control
- CVSS 9.0 CriticalCritical · CVSS 9+
WordPress Piotnet Forms Plugin <= 1.0.25 is vulnerable to Arbitrary File Upload
- Piotnet Forms
- Unrestricted file upload