{"id":"CVE-2020-27851","aliases":["EUVD-2022-3751","GHSA-fcj2-rxqc-294c"],"status":"published","title":"Gravity Forms stored HTML injection vulnerability","description":"Multiple stored HTML injection vulnerabilities in the \"poll\" and \"quiz\" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary HTML code via poll or quiz answers. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00794,"percentile":0.5689,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2021-01-20T03:14:39Z","modified":"2026-06-17T03:09:44Z","fixes":[{"ecosystem":"Packagist","package":"wp-premium/gravityforms","fixed_in":["2.4.21"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"wp-premium/gravityforms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.21"}]}]},{"source":"osv","ecosystem":"Packagist","package":"wp-premium/gravityforms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.21"}]}],"versions":["2.2.6.5","2.3.2","2.4.10","2.4.11","2.4.12","2.4.16","2.4.17","2.4.20","2.4.5","2.4.7.3","2.4.8","2.4.9"]}],"products":[{"vendor":"rocketgenius","product":"gravityforms"}],"references":[{"url":"https://www.digital.security/advisories/cert-ds_advisory_cve-2020-27851.txt","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27851","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fcj2-rxqc-294c"},{"url":"https://github.com/wp-premium/gravityforms","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2020-27851","description":"Multiple stored HTML injection vulnerabilities in the \"poll\" and \"quiz\" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary HTML code via poll or quiz answers. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).","status":"published","published":"2021-01-20T03:14:39Z","modified":"2024-08-04T16:25:43.806Z","updated_at":"2026-11-02T14:35:53.552996Z"}],"euvd":[{"id":"EUVD-2022-3751","description":"Multiple stored HTML injection vulnerabilities in the \"poll\" and \"quiz\" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary HTML code via poll or quiz answers. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).","status":"published","published":"2021-01-20T03:14:39Z","modified":"2024-08-04T16:25:43Z","updated_at":"2026-11-03T03:07:11.320494Z"}],"ghsa":[{"id":"GHSA-fcj2-rxqc-294c","title":"Gravity Forms stored HTML injection vulnerability","description":"Multiple stored HTML injection vulnerabilities in the \"poll\" and \"quiz\" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary HTML code via poll or quiz answers. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).","status":"published","published":"2022-05-24T17:39:34Z","modified":"2024-04-24T18:05:26Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:37:45.47408Z"}],"nvd":[{"id":"CVE-2020-27851","description":"Multiple stored HTML injection vulnerabilities in the \"poll\" and \"quiz\" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary HTML code via poll or quiz answers. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).","status":"published","published":"2021-01-20T04:15:12.997Z","modified":"2026-06-17T03:09:44.353Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:06:30.596418Z"}],"osv":[{"id":"GHSA-fcj2-rxqc-294c","title":"Gravity Forms stored HTML injection vulnerability","description":"Multiple stored HTML injection vulnerabilities in the \"poll\" and \"quiz\" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary HTML code via poll or quiz answers. This code is interpreted by users in a privileged role (Administrator, Editor, etc.).","status":"published","published":"2022-05-24T17:39:34Z","modified":"2024-04-24T18:28:59.322299Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:46.39441Z"}]}}