Advisories · Technology
westguard WS Form LITE – Drag & Drop Contact Form Builder.
Every CVE that names westguard WS Form LITE – Drag & Drop Contact Form Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
WS Form LITE <= 1.12.18 - Unauthenticated Stored Cross-Site Scripting via Text Field Array Value
- westguard WS Form LITE – Drag & Drop Contact Form Builder
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission
- westguard WS Form LITE – Drag & Drop Contact Form Builder
- Insecure deserialization
- CVSS 5.3 Medium
WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposure
- westguard WS Form LITE – Drag & Drop Contact Form Builder
- Broken access control
- CVSS 7.2 High
WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting
- westguard WS Form LITE – Drag & Drop Contact Form Builder
- WS Form Pro
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.9.244 - Reflected Cross-Site Scripting via URL
- westguard WS Form LITE – Drag & Drop Contact Form Builder
- Cross-site scripting (XSS)
- CVSS 4.7 Medium
WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection
- westguard WS Form LITE – Drag & Drop Contact Form Builder
- WS Form Pro
- Other injection