PT-2024-29401

Name of the Vulnerable Software and Affected Versions Simple Basic Contact Form plugin for WordPress versions up to and including 20240502 Description The issue allows unauthenticated attackers to execute arbitrary shortcodes, depending on the functionality of other plugins installed in the...

CVE-2024-4144: Improper Control of Generation of Code

The Simple Basic Contact Form plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 20240502. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability depends on the functionality of...

CVE-2024-4150: Improper Neutralization of Input During Web Page Generation

The Simple Basic Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘scfemail’ parameter in versions up to, and including, 20221201 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

PT-2024-29426 · WordPress · Simple Basic Contact Form

Name of the Vulnerable Software and Affected Versions: Simple Basic Contact Form plugin for WordPress versions up to and including 20221201 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts vi...

Cross-site Scripting (XSS)

MS Basic vulnerable to a cross-site scripting XSS vulnerability. The vulnerability is due to insufficient input sanitization in the search function, allowing attackers to inject malicious scripts into the search input, potentially leading to the execution of arbitrary code in the context of other...

net.mingsoft:ms-mattention (2.1.7), net.mingsoft:ms-mcms (>=5.2.1, <=5.2.8) +7 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (>=2.1.0, <=2.1.13.1)

net.mingsoft:ms-basic MAVEN version =2.1.0, =5.2.1, =2.1.5, =2.1.0, =2.1.7, =2.1.5, =2.1.5, =2.1.0, =2.1.13 Source cves: CVE-2024-33748 Source advisory: GHSA-64CM-3CJ3-67HF...

net.mingsoft:ms-mdiy (1.0.18), net.mingsoft:ms-mpeople (1.0.21) potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.27)

net.mingsoft:ms-basic MAVEN version 1.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy 1.0.18 - net.mingsoft:ms-mpeople 1.0.21 Source cves: CVE-2024-33748 Source advisory:...

net.mingsoft:ms-mdiy (1.0.20), net.mingsoft:ms-mpeople (1.0.24) potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.29)

net.mingsoft:ms-basic MAVEN version 1.0.29 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy 1.0.20 - net.mingsoft:ms-mpeople 1.0.24 Source cves: CVE-2024-33748 Source advisory:...

net.mingsoft:ms-mdiy (1.0.21), net.mingsoft:ms-mpeople (1.0.25) +1 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.30)

net.mingsoft:ms-basic MAVEN version 1.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy 1.0.21 - net.mingsoft:ms-mpeople 1.0.25 - net.mingsoft:store-client 3.0 Source cves:...

net.mingsoft:ms-mattention (1.0.4), net.mingsoft:ms-mcms (5.1) +7 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.31)

net.mingsoft:ms-basic MAVEN version 1.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mattention 1.0.4 - net.mingsoft:ms-mcms 5.1 - net.mingsoft:ms-mcomment 1.0.4 - net.mingsoft:ms-mdiy...

net.mingsoft:ms-datascope (1.0.0), net.mingsoft:ms-id (1.0.1) +9 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.28)

net.mingsoft:ms-basic MAVEN version 1.0.28 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-datascope 1.0.0 - net.mingsoft:ms-id 1.0.1 - net.mingsoft:ms-init 1.0.0 - net.mingsoft:ms-mactiviti...

net.mingsoft:ms-mcms (5.2.0.release), net.mingsoft:ms-mdiy (1.0.28) +2 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.36)

net.mingsoft:ms-basic MAVEN version 1.0.36 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mcms 5.2.0.release - net.mingsoft:ms-mdiy 1.0.28 - net.mingsoft:ms-mpeople 1.0.33 -...

net.mingsoft:ms-mcms (5.2), net.mingsoft:ms-mpeople (1.0.29) +1 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.32)

net.mingsoft:ms-basic MAVEN version 1.0.32 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mcms 5.2 - net.mingsoft:ms-mpeople 1.0.29 - net.mingsoft:ms-msend 1.0.12 Source cves: CVE-2024-33748...

net.mingsoft:ms-mdiy (1.0.27), net.mingsoft:ms-mpeople (1.0.32) +1 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.35)

net.mingsoft:ms-basic MAVEN version 1.0.35 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy 1.0.27 - net.mingsoft:ms-mpeople 1.0.32 - net.mingsoft:store-client 5.2.0.release Source cves:...

net.mingsoft:ms-mcms (5.2.0), net.mingsoft:ms-mdiy (1.0.24) +3 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.33)

net.mingsoft:ms-basic MAVEN version 1.0.33 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mcms 5.2.0 - net.mingsoft:ms-mdiy 1.0.24 - net.mingsoft:ms-mpeople 1.0.30 - net.mingsoft:ms-msend...

net.mingsoft:ms-mdiy (>=1.0.25, <=1.0.26), net.mingsoft:ms-mpeople (1.0.31) potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.34)

net.mingsoft:ms-basic MAVEN version 1.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy =1.0.25, =1.0.26 - net.mingsoft:ms-mpeople 1.0.31 Source cves: CVE-2024-33748 Source advisory:...

net.mingsoft:ms-ad (1.0.0), net.mingsoft:ms-clean (>=1.0.0, <=1.0.1) +16 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.20)

net.mingsoft:ms-basic MAVEN version 1.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-ad 1.0.0 - net.mingsoft:ms-clean =1.0.0, =1.0.2, =1.0.1, =1.0.8, =1.0.9 - net.mingsoft:ms-msso-clien...

net.mingsoft:ms-mcms (4.7.2), net.mingsoft:ms-upgrader (1.0.13) potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.16)

net.mingsoft:ms-basic MAVEN version 1.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mcms 4.7.2 - net.mingsoft:ms-upgrader 1.0.13 Source cves: CVE-2024-33748 Source advisory:...

net.mingsoft:ms-mactiviti (1.0.4), net.mingsoft:ms-mdiy (1.0.12) +6 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.17)

net.mingsoft:ms-basic MAVEN version 1.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mactiviti 1.0.4 - net.mingsoft:ms-mdiy 1.0.12 - net.mingsoft:ms-mlic-client 1.0.0 -...

net.mingsoft:ms-mcms (>=4.6.3-snapshots, <=4.6.5), net.mingsoft:ms-mdiy (1.0.16) +7 more potentially affected by CVE-2024-33748 via net.mingsoft:ms-basic (1.0.21)

net.mingsoft:ms-basic MAVEN version 1.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mcms =4.6.3-snapshots, =4.6.5 - net.mingsoft:ms-mdiy 1.0.16 - net.mingsoft:ms-mlic-client 1.0.3 -...