222 matches found
CVE-2017-20055 BestWebSoft Contact Form Plugin Stored cross site scriting
A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting Stored. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...
CVE-2017-20055 BestWebSoft Contact Form Plugin Stored cross site scriting
A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting Stored. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...
CVE-2017-20055: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting Stored. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...
PT-2022-7928
Name of the Vulnerable Software and Affected Versions BestWebSoft Contact Form Plugin version 4.0.0 Description A vulnerability has been found in the BestWebSoft Contact Form Plugin, allowing for basic cross site scripting Stored attacks. The manipulation can be initiated remotely. The issue...
Wordpress plugin contact-form remote file upload vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. Wordpress plugin contact-form has a remote file upload vulnerability. Allows ...
WordPress contact-form-plugin plugin cross-site scripting vulnerability (CNVD-2019-36081)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress contact-form-plugin plugin cross-site scripting vulnerability (CNVD-2019-36080)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress contact-form-plugin plugin cross-site scripting vulnerability (CNVD-2019-36071)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress contact-form-plugin plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress booking-calendar-contact-form plugin cross-site scripting vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress booking-calendar-contact-form plugin. An attacker...
WordPress booking-calendar-contact-form plugin SQL injection vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress booking-calendar-contact-form plugin. An attacker can...
CVE-2013-7481
The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...
CVE-2013-7481
CVE-2013-7481 is a cross-site scripting (XSS) vulnerability in the WordPress plugin contact-form-plugin, affecting versions before 3.3.5. The issue resides in the plugin’s contact_form.php, enabling an attacker to inject script. Remediation: upgrade to version 3.3.5 or later. Other connected sour...
CVE-2013-7481
The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...
PT-2019-7030
Name of the Vulnerable Software and Affected Versions contact-form-plugin plugin versions prior to 3.3.5 for WordPress Description The issue is related to a cross-site scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or...
CVE-2013-7481: Improper Neutralization of Input During Web Page Generation
The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...
CVE-2017-18491
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues...
CVE-2016-10869
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS...
