CVEブラウザに戻る

CVE-2021-34676

HIGH

7.5

CVSS Severity Score

EPSS Score0.1880%

EPSS Percentile23.51th

Published2021年7月19日

Last Modified2024年11月21日

Vulnerability Description

Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation.

Affected Platforms (CPE)

📦

Basixonline

Nex Forms

<= 7.8.7

References & Advisories

🔗 http://basixonline.net/nex-forms-wordpress-form-builder-demo/change-log/

🔗 https://github.com/rauschecker/CVEs/tree/main/CVE-2021-34676

🔗 http://basixonline.net/nex-forms-wordpress-form-builder-demo/change-log/

🔗 https://github.com/rauschecker/CVEs/tree/main/CVE-2021-34676

関連する脆弱性情報

CVE-2015-94529.8

The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-form...

CVE-2021-346757.5

Basix NEX-Forms through 7.8.7 allows authentication bypass for stored PDF reports.

CVE-2020-366706.3

The NEX-Forms. plugin for WordPress is vulnerable to unauthorized disclosure and modification of data in versions up to, and inclu...

CVE-2014-71516.1

Multiple cross-site scripting (XSS) vulnerabilities in the NEX-Forms Lite plugin 2.1.0 for WordPress allow remote attackers to inj...