WordPress Contact Form Generator <= 2.0.1 - Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications Live Demos. It is packed with a Template Creator Wizard to create fantastic forms in a matter of seconds without coding. copy of ´contactformgenerator.php´ file =================== TECHNICAL DETAILS =================== A CSRF issue was found i...

Contact Form Generator <= 2.0.1 - Multiple Cross-Site Request Forgery (CSRF)

The Contact Form Generator : Creative form builder for WordPress WordPress plugin was affected by a Multiple Cross-Site Request Forgery CSRF security vulnerability...

WordPress Plugin Contact Form Generator 2.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

WordPress Plugin Contact Form Generator 2.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities Live Demos. It is packed with a Template Creator Wizard to create fantastic forms in a matter of seconds without coding. copy of ´contactformgenerator.php´ file =================== TECHNICAL...

WordPress Contact Form Generator Plugin <= 2.0.1 - Multiple CSRF Vulnerabilities

These multiple vulnerabilities allow an attacker to create form field and inject HTML or JavaScript code without any permission. Also, an attacker can upload form field by injecting HTML or JavaScript code. The same is with templates creation and update. Solution Upgrade the plugin...

WordPress Plugin Contact Form Generator 2.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Live Demos. It is packed with a Template Creator Wizard to create fantastic forms in a matter of seconds without coding. copy of ´contactformgenerator.php´ file =================== TECHNICAL DETAILS =================== A CSRF issue was found in the latest version of the plugin for wordpress...

gainesreptiles.com XSS vulnerability

Vulnerable URL: http://www.gainesreptiles.com/contact.php?subject=Male=Dopasia+gracilis=ℑ=foo.png" onerror=alert/XSSPOSED/ / Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

WordPress CP Contact Form with Paypal Plugin Scripting Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.CP Contact Form with Paypal is a support for adding Paypal commonly used contacts to the Worpress website plugin. WordPress CP Contact Form with Paypal...

WordPress Contact Form Plugin <= 1.1.9 - SQL Injection

Because of this vulnerability, authenticated users can execute arbitrary SQL commands via " post-new.php". Solution Update the plugin...

myap.inside24.info XSS vulnerability

Open Bug Bounty ID: OBB-71874 Description| Value ---|--- Affected Website:| myap.inside24.info Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

WordPress CP Contact Form with Paypal Plugin 1.1.5 - Multiple Vulnerabilities

There are multiple vulnerabilities in this plugin, such as CSRF, XSS and SQL injection. These vulnerabilities allow an attacker to add or delete forms, export CSV files of the messages and modify settings of the form. Solution Upgrade to version 1.1.6...

WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities

WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 Submitter: Nitin Venkatesh Product: CP Contact Form with Paypal Wordpress Plugin Product...

WordPress CP Contact Form With Paypal 1.1.5 CSRF / XSS / SQL Injection Vulnerabilities

WordPress CP Contact Form with Paypal plugin version 1.1.5 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities. Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5...

WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities

Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 Submitter: Nitin Venkatesh Product: CP Contact Form with Paypal Wordpress Plugin Product URL: https://wordpress.org/plugins/cp-contact-form-with-paypal/ Vulnerability...

WordPress CP Contact Form With Paypal 1.1.5 CSRF / XSS / SQL Injection

Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 Submitter: Nitin Venkatesh Product: CP Contact Form with Paypal Wordpress Plugin Product URL: https://wordpress.org/plugins/cp-contact-form-with-paypal/ Vulnerability...

CP Contact Form with Paypal <= 1.1.5 - Multiple Vulnerabilities

The CP Contact Form with PayPal WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

WordPress Contact Form Builder Plugin <= 1.0.24 - Blind SQL Injection

Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands. Solution Upgrade this plugin...

Contact Form Maker Component SQL Injection Vulnerability

Joomla! is an open source content management system that provides RSS feeds, site search, etc. Contact Form Maker is a component for creating submission forms. A SQL injection vulnerability exists in the Joomla! Contact Form Maker component that can be exploited by remote attackers to submit a...

WordPress Encrypted Contact Form plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Encrypted Contact Form plugin is a WordPress plugin that uses end-to-end encryption to send user information. A...

WordPress Encrypted Contact Form Plugin 1.0.4 - CSRF Vulnerability

Exploit for php platform in category web applications Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL:...

WordPress Plugin Encrypted Contact Form 1.0.4 - Cross-Site Request Forgery

WordPress Plugin Encrypted Contact Form 1.0.4 - Cross-Site Request Forgery Title: CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4 Submitter: Nitin Venkatesh Product: Encrypted Contact Form Wordpress Plugin Product URL:...