{"id":"CVE-2020-27851","aliases":[],"url":"https://o3.security/vulnerability/CVE-2020-27851","summary":"Multiple stored HTML injection vulnerabilities in the \"poll\" and \"quiz\" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to…","details":"Multiple stored HTML injection vulnerabilities in the \"poll\" and \"quiz\" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary HTML code via poll or quiz answers. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).","published":"2021-01-20T03:14:39.000Z","modified":"2024-08-04T16:25:43.806Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://www.digital.security/advisories/cert-ds_advisory_cve-2020-27851.txt"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2024-08-04T16:25:43.806Z"}}