Contact Form by WPForms < 1.4.8 - Authenticated Stored Cross-Site Scripting (XSS)

The Contact Form by WPForms – Drag & Drop Form Builder for WordPress WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

elitess.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-681197 Description| Value ---|--- Affected Website:| elitess.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

valora.com XSS vulnerability

Open Bug Bounty ID: OBB-681184 Description| Value ---|--- Affected Website:| valora.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...

nier.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-679692 Description| Value ---|--- Affected Website:| nier.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

thelaserclinic.ca XSS vulnerability

Open Bug Bounty ID: OBB-679236 Description| Value ---|--- Affected Website:| thelaserclinic.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bikemanperformance.ca XSS vulnerability

Open Bug Bounty ID: OBB-679215 Description| Value ---|--- Affected Website:| bikemanperformance.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tbghouse.ca XSS vulnerability

Open Bug Bounty ID: OBB-679212 Description| Value ---|--- Affected Website:| tbghouse.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

canbrit.ca XSS vulnerability

Open Bug Bounty ID: OBB-679204 Description| Value ---|--- Affected Website:| canbrit.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

exam-vision.se XSS vulnerability

Open Bug Bounty ID: OBB-678866 Description| Value ---|--- Affected Website:| exam-vision.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Wordpress Arigato Autoresponder and Newsletter Cross-Site Scripting Vulnerability (CNVD-2019-29709)

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports personal blog sites on PHP and MySQL servers.Arigato Autoresponder and Newsletter is an autoresponder plugin used in... A cross-site scripting vulnerability exists in the...

Wordpress Arigato Autoresponder and Newsletter Cross-Site Scripting Vulnerability (CNVD-2019-29708)

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports personal blog sites on PHP and MySQL servers.Arigato Autoresponder and Newsletter is an autoresponder plugin used in... A cross-site scripting vulnerability exists in the...

kojimadental.com XSS vulnerability

Open Bug Bounty ID: OBB-678393 Description| Value ---|--- Affected Website:| kojimadental.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[20181001] - Core - Hardening com_contact contact form

Inadequate checks in comcontact could allowed mail submission in disabled forms...

glanllyn.com XSS vulnerability

Open Bug Bounty ID: OBB-676782 Description| Value ---|--- Affected Website:| glanllyn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Contact Form 7 plugin <= 5.0.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability found by Simon Scannell in WordPress Contact Form 7 plugin versions = 5.0.3. Solution Update the WordPress Contact Form 7 plugin to the latest available version at least 5.0.4...

onlinebrief24.de XSS vulnerability

Open Bug Bounty ID: OBB-673046 Description| Value ---|--- Affected Website:| onlinebrief24.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Contact Form 7 <= 5.0.3 - register_post_type() Privilege Escalation

According to the official release: "A privilege escalation vulnerability has been found in Contact Form 7 5.0.3 and older versions. Utilizing this vulnerability, a logged-in user in the Contributor role can potentially edit contact forms, which only Administrator and Editor-role users are allowed...

conventiondundeeandangus.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-671918 Description| Value ---|--- Affected Website:| conventiondundeeandangus.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cdfinder.de XSS vulnerability

Open Bug Bounty ID: OBB-669505 Description| Value ---|--- Affected Website:| cdfinder.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ninja Forms <= 3.3.13 - CSV Injection

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a CSV Injection security vulnerability...