Vulnerabilities (CVE)

Filtered by vendor Gsheetconnector Subscribe
Filtered by product Ninja Forms Google Sheet Connector
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-2333 1 Gsheetconnector 1 Ninja Forms Google Sheet Connector 2024-11-21 N/A 6.1 MEDIUM
The Ninja Forms Google Sheet Connector WordPress plugin before 1.2.7, gsheetconnector-ninja-forms-pro WordPress plugin through 1.2.7 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin