CVE-2023-25449

CVE-2023-25449 is a CSRF vulnerability in the WordPress plugin cformsII

CVE-2023-25449

Cross-Site Request Forgery CSRF vulnerability in Oliver Seidel, Bastian Germann cformsII plugin = 15.0.4 versions...

WordPress Plugin Oliver Seidel, Bastian Germann cformsII 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Oliver Seidel, Bastia...

CVE-2023-25449: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Oliver Seidel, Bastian Germann cformsII plugin = 15.0.4 versions...

PT-2023-20068

Name of the Vulnerable Software and Affected Versions cformsII plugin versions = 15.0.4 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application that the user ...

WordPress CformsII Plugin <= 15.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software CformsII Type Plugin Vulnerable versions = 15.0.4 Fixed in 15.0.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25449 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f61b406fa27a Credits Rio Darmawan Required...

CformsII <15.0.4 - Settings Update via CSRF

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

Cforms & CformsII <= 15.0.1 - Unauthenticated HTML Injection & CSRF

...

WordPress CformsII plugin <= 15.0.1 - Unauthenticated HTML Injection & Cross-Site Request Forgery (CSRF) vulnerabilities

Unauthenticated HTML Injection & Cross-Site Request Forgery CSRF vulnerabilities found by Jerome Bruandet Nintechnet in WordPress CformsII plugin versions = 15.0.1. Solution Update the WordPress CformsII plugin to the latest available version at least 15.0.2...

Cforms & CformsII < 14.13.3 - Multiple XSS

...

Cforms & CformsII < 14.13 - SQL Injection

...

Unrestricted file upload

Unrestricted file upload vulnerability in libnonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the cfuploadfile2 parameter, then accessing the file via a direct request to the fi...

CVE-2014-9473

Unrestricted file upload vulnerability in libnonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the cfuploadfile2 parameter, then accessing the file via a direct request to the fi...

CVE-2014-9473: Undefined Security Weakness

Unrestricted file upload vulnerability in libnonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the cfuploadfile2 parameter, then accessing the file via a direct request to the fi...

PT-2015-4231

Name of the Vulnerable Software and Affected Versions CformsII plugin versions 14.7 and earlier Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the cf uploadfile2 parameter, then accessing the file via a direct request t...

WordPress plugin cformsII 'lib_nonajax.php' arbitrary file upload vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in the WordPress plugin cformsII 'libnonajax.php' because the application fails...

Cforms & CformsII <= 14.7 - Remote Code Execution via Unauthorised File Upload

...

WordPress Plugin cformsII 'lib_ajax.php' Multiple HTML Injection Vulnerabilities

cformsII WordPress Plugin is prone to multiple HTML injection vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress cformsII plugin rs and rsargs parameters to a script injection vulnerability and fix-vulnerability warning-the black bar safety net

Affected version: Nicole Stich cformsII 11.5 Vulnerability description: WordPress is a Free Forum Blog system. WordPress using cformsII plugin does not properly filter user submitted to the wp-content/plugins/cforms /libajax. php page of the rs and rsargs parameters will be displayed to the user...

cformsII Plugin for WordPress 'rs' Parameter XSS

The version of the cformsII plugin for WordPress hosted on the remote web server fails to sanitize user-supplied input to the 'rs' parameter of the 'libajax.php' script before using it to generate dynamic HTML output. An attacker can leverage this issue to inject arbitrary HTML or script code int...