Vulnerabilidades en supsysticcom

12 resultados
CVE-2026-4257CRITICALContact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill FunctionalityEPSS 41.5%CVE-2025-12089MEDIUMData Tables Generator by Supsystic <= 1.10.45 - Authenticated (Admin+) Arbitrary File DeletionEPSS 0.7%CVE-2026-18322HIGHSmart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to AdministratorEPSS 0.6%CVE-2026-83625HIGHContact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address HeaderEPSS 0.6%CVE-2026-104023MEDIUMSmart Popup by Supsystic <= 1.13.2 - Authenticated (Administrator+) SQL Injection via 'sidx' ParameterEPSS 0.4%CVE-2024-5219MEDIUMEasy Google Maps <= 1.11.15 - Authenticated (Author+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-13452MEDIUMContact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX ActionEPSS 0.3%CVE-2023-2528MEDIUMContact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX actionEPSS 0.3%CVE-2023-2526MEDIUMEasy Google Maps <= 1.11.7 - Cross-Site Request Forgery via AJAX actionEPSS 0.3%CVE-2023-5756MEDIUMDigital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX actionEPSS 0.3%CVE-2026-96648MEDIUMData Tables Generator by Supsystic <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows ActionEPSS 0.2%CVE-2026-14877MEDIUMData Tables Generator by Supsystic <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table 'id' HTML AttributeEPSS 0.2%