Advisories · Technology
reputeinfosystems Contact Form, Survey, Quiz & Popup Form Builder – ARForms.
Every CVE that names reputeinfosystems Contact Form, Survey, Quiz & Popup Form Builder – ARForms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection
- reputeinfosystems Contact Form, Survey, Quiz & Popup Form Builder – ARForms
- Insecure deserialization
- CVSS 5.6 Medium
Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.2 - Unauthenticated Blind Arbitrary Shortcode Execution
- reputeinfosystems Contact Form, Survey, Quiz & Popup Form Builder – ARForms
- Code injection
- CVSS 7.1 High
ARForms Form Builder <= 1.6.4 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Option Deletion
- reputeinfosystems Contact Form, Survey, Quiz & Popup Form Builder – ARForms
- Broken access control
- CVSS 7.2 High
ARForms <= 1.5.8 - Unauthenticated Stored Cross-Site Scripting via arf_http_referrer_url
- reputeinfosystems Contact Form, Survey, Quiz & Popup Form Builder – ARForms
- Cross-site scripting (XSS)