Zoho Forms (Zohocorp) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2023-12-29. Vendor: Zohocorp.

CVEs of Zoho Forms

• CVE-2023-50891 - CVSS 6.5 (medium), 2023-12-29: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zoho Forms Form plugin for WordPress – Zoho Forms allows…
• CVE-2023-0169 - CVSS 5.4 (medium), 2023-02-13: The Zoho Forms WordPress plugin before 3.0.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where…