Skip to main content

Formspree

1 CVEs product

Monthly

CVE-2018-6354 MEDIUM POC PATCH This Month

templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the _next parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Formspree
NVD GitHub
CVSS 3.0
6.1
EPSS
0.7%
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the _next parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Formspree
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy