5 matches found
CVE-2024-9614
The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary...
CVE-2024-9614
creationtimestamp| type| source ---|---|--- 2024-11-13 04:07:11+00:00| seen| https://t.me/cvedetector/10766 2024-11-13 04:22:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113473731714086926...
CVE-2024-9614
The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary...
CVE-2024-9614 Constant Contact Forms by MailMunch <= 2.1.2 - Reflected Cross-Site Scripting
The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary...
WordPress Constant Contact Forms by MailMunch Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)
Software Constant Contact Forms by MailMunch Type Plugin Vulnerable versions = 2.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9614 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 53dd5edc8197 Credits...