4951 matches found
Registration Magic < 4.6.0.3 - Multiple Cross-Site Scripting (XSS)
The plugin is affected by an unauthenticated Stored XSS on the Contact Form which could allow attacks against administrators viewing the submissions. As well as multiple reflected XSS...
CVE-2014-7238
The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...
Cross site scripting
The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...
CVE-2014-7238
The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...
CVE-2014-7238
The CVE-2014-7238 entry concerns a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Contact Form Integrated With Google Maps” version 1.0–2.4. Descriptions in connected sources consistently identify the flaw as Stored XSS within that plugin; there are no details in the pro...
WordPress Contact Form Clean and Simple plugin <= 4.7.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Jeroen Mulder in WordPress Contact Form Clean and Simple plugin versions = 4.7.0. Solution 01.22.2020 - we were unable to find a patched version of this plugin...
Contact Form Clean and Simple < 4.7.1 - Authenticated Stored XSS
The Contact Form Clean and Simple WordPress plugin was vulnerable to Authenticated stored XSS. When a user has admin capabilities, malicious code can be submitted through the plugin's options. This code will then be executed on every page with the contact form on the front-end. By checking the...
WordPress Fast Secure Contact Form Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Fast Secure Contact Form is a contact form plugin used in it. A cross-site scripting vulnerability exists in WordPress Fast Secure...
Cross site scripting
The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fscontactform1welcome XSS...
CVE-2015-9539
The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fscontactform1welcome XSS...
CVE-2015-9539
The CVE-2015-9539 entry concerns the WordPress plugin Fast Secure Contact Form. Affects versions prior to 4.0.38, where the fs_contact_form1[welcome] parameter is vulnerable to cross-site scripting (XSS). Root cause is insufficient input validation/escaping in the form handling, enabling attacker...
Cross-site Scripting in YII2-CMS
YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...
WordPress contact-form-plugin plugin cross-site scripting vulnerability (CNVD-2019-36071)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress contact-form-plugin plugin cross-site scripting vulnerability (CNVD-2019-36081)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress contact-form-plugin plugin cross-site scripting vulnerability (CNVD-2019-36080)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress contact-form-to-email plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-to-email is a plugin used to send contact form information to an email address. A cross-site scripting vulnerability exis...
WordPress contact-form-to-email plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-to-email is a plugin used to send contact form information to an email address. A cross-site request forgery vulnerabilit...
WordPress new-contact-form-widget plugin SQL Injection Vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. new-contact-form-widget is a contact form builder plugin used in it. A SQL injection vulnerability exists in the WordPress...
