Vulnerability history

Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module vulnerability

Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Broken Access Control vulnerability

Arbitrary Shortcode Execution vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder vulnerability

Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id vulnerability

Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

IP-Spoofing vulnerability

Unauthenticated Stored Cross-Site Scripting via Form Subject vulnerability

Admin+ Stored XSS vulnerability

Authenticated (Form Manager+) Stored Cross-Site Scripting vulnerability

Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification vulnerability

Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

PHP Object Injection vulnerability

Missing Authorization to Settings Update and Limited Privilege Escalation vulnerability

Missing Authorization to Setting Manipulation vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title vulnerability

Broken Access Control vulnerability

SQL Injection vulnerability

Contributor+ Stored XSS via Custom HTML Form Field vulnerability

CSV Injection vulnerability

Cross-Site Request Forgery (CSRF) vulnerability leading to stored Cross-Site Scripting (XSS)