Advisories · Technology
WS Form Pro.
Every CVE that names WS Form Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting
- westguard WS Form LITE – Drag & Drop Contact Form Builder
- WS Form Pro
- Cross-site scripting (XSS)
- CVSS 4.7 Medium
WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection
- westguard WS Form LITE – Drag & Drop Contact Form Builder
- WS Form Pro
- Other injection
-
WS Form < 1.8.176 - Unauthenticated Stored Cross-Site Scripting
- WS Form LITE – Drag & Drop Contact Form Builder for WordPress
- WS Form Pro
- Cross-site scripting (XSS)
-
WS Form < 1.8.176 - Admin+ Stored Cross-Site Scripting
- WS Form LITE – Drag & Drop Contact Form Builder for WordPress
- WS Form Pro
- Cross-site scripting (XSS)