Lucene search
PRIOn knowledge basePRION:CVE-2020-10385HistoryMar 24, 2020 - 4:15 p.m.
Cross site scripting
2020-03-2416:15:00
PRIOn knowledge base
www.prio-n.com
50
0.006 Low
EPSS
Percentile
77.9%
A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress.
| CPE | Name | Operator | Version |
|---|---|---|---|
| contact_form | lt | 1.5.9 |
References
packetstormsecurity.com/files/156910/WordPress-WP-Forms-1.5.8.2-Cross-Site-Scripting.html
wordpress.org/plugins/wpforms-lite/
wpvulndb.com/vulnerabilities/10114
www.getastra.com/blog/911/plugin-exploit/stored-xss-vulnerability-found-in-wpforms-plugin/
www.jinsonvarghese.com/stored-xss-vulnerability-found-in-wpforms-plugin/
Related
packetstorm
packetstorm
WordPress WPForms 1.5.9 Cross Site Scripting
2020-03-24 00:00:00
WordPress WP Forms 1.5.8.2 Cross Site Scripting
2020-03-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Wordpress WPForms Plugin Cross-Site Scripting (CVE-2020-10385)
2020-03-31 00:00:00
patchstack
patchstack
openvas
openvas
WordPress WPForms Contact Form Plugin < 1.5.9 XSS Vulnerability
2020-03-26 00:00:00
cvelist
cvelist
CVE-2020-10385
2020-03-11 04:07:16
nvd
nvd
CVE-2020-10385
2020-03-24 16:15:12
exploitpack
exploitpack
Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting
2020-03-24 00:00:00
zdt
zdt
cve
cve
CVE-2020-10385
2020-03-24 16:15:12
wpvulndb
wpvulndb
Contact Form by WPForms < 1.5.9 - Authenticated Cross-Site Scripting (XSS)
2020-03-05 00:00:00
exploitdb
exploitdb
WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting
2020-03-24 00:00:00