Every CVE whose affected-product data names Happyforms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2023-48752 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Happyforms Form builder to get in…
CVE-2024-44063 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Happyforms allows Stored…
CVE-2023-0096 — CVSS 5.4 (medium): The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a…
CVE-2024-23521 — CVSS 5.3 (medium): Missing Authorization vulnerability in Happyforms.This issue affects Happyforms: from n/a through 1.25.10.
CVE-2024-10054 — CVSS 4.8 (medium): The Happyforms WordPress plugin before 1.26.3 does not sanitise and escape some of its settings, which could allow high privilege users…