Fetchdesigns

fetchdesigns

4 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-6020 1Fetchdesigns 1Sign Up Sheets Jun 17, 2026 Sep 4, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter before outputting them back in attributes, which could lead to Reflected Cross-Site...Show more The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter before outputting them back in attributes, which could lead to Reflected Cross-Site Scripting.Show less
CVE-2023-39165 1Fetchdesigns 1Sign Up Sheets Jun 17, 2026 Oct 3, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets plugin <= 2.2.8 versions.
CVE-2021-24441 1Fetchdesigns 1Sign Up Sheets Jun 17, 2026 Jul 12, 2021 N/A· v4 8.0 HIGH· v3 6.0 MEDIUM· v2 The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue
CVE-2021-24440 1Fetchdesigns 1Sign Up Sheets Jun 17, 2026 Jul 12, 2021 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting...Show more The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting issue. The payloads will be triggered when viewing the 'All Sheets' page in the admin dashboardShow less