Lucene search
Yuga Futatsuki (Cryptography Laboratory in Tokyo Denki University)PATCHSTACK:DAF5DE04EDC4065C9E0E5987501B9AE5HistoryNov 29, 2021 - 12:00 a.m.
WordPress Contact Form With Captcha plugin <= 1.6.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
2021-11-2900:00:00
Yuga Futatsuki (Cryptography Laboratory in Tokyo Denki University)
patchstack.com
6
0.001 Low
EPSS
Percentile
41.9%
Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) discovered by Yuga Futatsuki (Cryptography Laboratory in Tokyo Denki University) in WordPress Contact Form With Captcha plugin (versions <= 1.6.7).
Solution
Update the WordPress Contact Form With Captcha plugin to the latest available version (at least 1.6.8).
| CPE | Name | Operator | Version |
|---|---|---|---|
| contact form with captcha | le | 1.6.7 |
Related
prion
prion
Cross site request forgery (csrf)
2021-11-29 19:15:00
cnvd
cnvd
WordPress Plugin Cross-Site Request Forgery Vulnerability (CNVD-2021-102810)
2021-12-01 00:00:00
nvd
nvd
CVE-2021-42358
2021-11-29 19:15:07
cve
cve
CVE-2021-42358
2021-11-29 19:15:07
wpvulndb
wpvulndb
Contact Form With Captcha <= 1.6.2 - CSRF to Stored Cross-Site Scripting
2021-11-29 00:00:00
cvelist
cvelist