Linksoftwarellc - vulnerabilities (CVEs)

7 CVEs in 4 products, 0 in the last 30 days, newest from 2025-04-22.

Products

CVE-2025-46236 - CVSS 6.5 (medium), 2025-04-22: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Software LLC HTML Forms html-forms allows Stored…
CVE-2024-6412 - CVSS 6.5 (medium), 2024-07-31: The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted…
CVE-2024-6243 - CVSS 5.9 (medium), 2024-07-22: The HTML Forms WordPress plugin before 1.3.33 does not sanitize and escape the form message inputs, allowing high-privilege users, such as administrators, to…
CVE-2023-52128 - CVSS 8.8 (high), 2024-01-05: Cross-Site Request Forgery (CSRF) vulnerability in WhiteWP White Label – WordPress Custom Admin, Custom Login Page, and Custom Dashboard.This issue affects…
CVE-2023-50836 - CVSS 5.9 (medium), 2023-12-28: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ibericode HTML Forms allows Stored XSS.This issue…
CVE-2023-24006 - CVSS 5.9 (medium), 2023-04-06: Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Link Software LLC WP Terms Popup plugin <= 2.6.0 versions.
CVE-2022-3689 - CVSS 7.2 (high), 2022-11-28: The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before using it in a SQL statement, leading to a SQL injection…