CVE-2017-18490

The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues...

CVE-2019-18490

...

CVE-2019-18490

CVE-2019-18490 entry is rejected and not used; this candidate was withdrawn by its CNA.

CVE-2017-18490

The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues...

CVE-2017-18490

The CVE-2017-18490 entry concerns the WordPress plugin contact-form-multi prior to version 1.2.1, which has multiple XSS issues (CWE-79). The NVD and connected Nuclei/WP- vulnerability data confirm that authenticated attackers can execute arbitrary JavaScript in victims’ browsers, potentially ste...