Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-24985 1 Yikesinc 1 Easy Forms For Mailchimp 2024-11-21 6.1 Medium
The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
CVE-2019-15318 1 Yikesinc 1 Easy Forms For Mailchimp 2024-11-21 N/A
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field.