Lifetime Free Drag Drop Contact Form Builder

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-46250 Apr 22, 10:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VForm allows Stored XSS.1.14. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Lifetime Free Drag Drop Contact Form Builder Wordpress Plugin

NVD

CVSS 3.1

5.9

EPSS

0.2%

CVE-2025-46250

EPSS 0% CVSS 5.9

MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VForm allows Stored XSS.1.14. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Lifetime Free Drag Drop Contact Form Builder +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy