6 matches found
CVE-2017-18490
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues...
MSC-2024-18490
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...
CVE-2019-18490
CVE-2019-18490 entry is rejected and not used; this candidate was withdrawn by its CNA.
CVE-2017-18490
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues...
CVE-2017-18490
The CVE-2017-18490 entry concerns the WordPress plugin contact-form-multi prior to version 1.2.1, which has multiple XSS issues (CWE-79). The NVD and connected Nuclei/WP- vulnerability data confirm that authenticated attackers can execute arbitrary JavaScript in victims’ browsers, potentially ste...