Lucene search
Morten NørtoftPATCHSTACK:DDC3E6E969048E4072F65AEDE992A3E8HistoryFeb 20, 2015 - 12:00 a.m.
WordPress Contact Form DB Plugin <= 2.8.26 - XSS
2015-02-2000:00:00
Morten Nørtoft
patchstack.com
7
EPSS
0.002
Percentile
52.0%
This vulnerability allows an attacker to inject arbitrary web script or HTML via the “submit_time” parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php.
Solution
Update the plugin.
Related
checkpoint_advisories
checkpoint_advisories
WordPress Contact Form DB Plugin Cross-Site Scripting (CVE-2015-2040)
2015-03-12 00:00:00
wpvulndb
wpvulndb
Contact Form DB <= 2.8.26 - Cross-Site Scripting (XSS)
2015-02-22 00:00:00
cvelist
cvelist
CVE-2015-2040
2015-02-20 16:00:00
nvd
nvd
CVE-2015-2040
2015-02-20 16:59:09
prion
prion
Cross site scripting
2015-02-20 16:59:00
cve
cve
CVE-2015-2040
2015-02-20 16:59:09
kaspersky
kaspersky
KLA10491 Multiple vulnerabilities in WordPress plugins
2015-03-17 00:00:00