Bannersky Bsk Forms Blacklist vulnerabilities

5 vulnerabilities

Known vulnerabilities in Bannersky Bsk Forms Blacklist, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.2CVE-2025-22347bannerskybsk_forms_blacklist+1
EPSS score
0.20%
Cross-Site Request Forgery (CSRF) vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind SQL Injection.This issue affects BSK Forms Blacklist: from n/a through <= 3.9.7.1CVE-2024-47624bannerskybsk_forms_blacklist+1
EPSS score
0.30%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Reflected XSS.This issue affects BSK Forms Blacklist: from n/a through <= 3.8.1.7.1CVE-2024-43233bannerskybsk_forms_blacklist+1
EPSS score
0.33%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BannerSky BSK Forms Blacklist allows Reflected XSS.This issue affects BSK Forms Blacklist: from n/a through 3.8.4.8CVE-2023-5980bannerskybsk_forms_blacklist+2
EPSS score
0.38%
The BSK Forms Blacklist WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).7.6CVE-2023-30872bannerskybsk_forms_blacklist+1
EPSS score
0.63%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BannerSky BSK Forms Blacklist.This issue affects BSK Forms Blacklist: from n/a through 3.6.2.