EPC Vulnerabilities and Affected Products
Vulnerabilities associated with ARForms.
Products
Clear product- ARForms2 vulnerabilities
- Blog Designer PRO for WordPress1 vulnerability
- Oshine Modules1 vulnerability
- User Activity Log Pro1 vulnerability
- Woffice1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-32702HIGH | WordPress ARForms plugin <= 6.4 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4. CWE-79Apr 24, 2024 | CVSS7.1v3.1 | EPSS0.357% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-32706HIGH | WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4. CWE-89Apr 24, 2024 | CVSS8.5v3.1 | EPSS0.565% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |