https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:57:31.893147+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24705 CVE-2021-24705 — NEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRF 2026-10-06T04:57:31.909295+00:00

Affected: Unknown NEX-Forms

The NEX-Forms WordPress plugin before 8.4.3 does not have CSRF checks in place when editing a form, and does not escape some of its settings as well as form fields before outputting them in attributes. This could allow attackers to make a logged in admin edit arbitrary forms with Cross-Site Scripting payloads in them