CVE-2014-8955

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

CVE-2014-8955

The CVE-2014-8955 entry describes a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Contact Form Clean and Simple” (also listed as clean-and-simple-contact-form-by-meg-nicholas) versions 4.4.0 and earlier. The issue arises from improper handling of the cscf[name] parameter submi...

CVE-2014-8955

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

PT-2014-8758

Name of the Vulnerable Software and Affected Versions Contact Form Clean and Simple plugin versions 4.4.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to the "contact-us/" endpoint. Recommendations F...

CVE-2014-8955: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...