Applyonline Application Form Builder And Manager

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-10098 May 15, 20:15 LOW POC Monitor

The ApplyOnline WordPress plugin before 2.6.3 does not protect uploaded files during the application process, allowing unauthenticated users to access them and any private information they contain. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Information Disclosure Applyonline Application Form Builder And Manager Spiderteams

NVD WPScan

CVSS 3.1

2.7

EPSS

0.3%

CVE-2023-45756 Oct 25, 18:17 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Applyonline Application Form Builder And Manager Spiderteams

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-24391 Aug 10, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Applyonline Application Form Builder And Manager Spiderteams

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2024-10098

EPSS 0% CVSS 2.7

LOW POC Monitor

WordPress Information Disclosure Applyonline Application Form Builder And Manager +1

NVD WPScan

CVE-2023-45756

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Applyonline Application Form Builder And Manager Spiderteams

NVD

CVE-2023-24391

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Applyonline Application Form Builder And Manager Spiderteams

NVD