CVE-2015-2040

Cross-site scripting XSS vulnerability in the Contact Form DB aka CFDB and contact-form-7-to-database-extension plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submittime parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php...

CVE-2015-2040

CVE-2015-2040 describes a cross-site scripting (XSS) vulnerability in the WordPress plugin Contact Form DB (CFDB / contact-form-7-to-database-extension) version 2.8.26. The issue allows remote attackers to inject arbitrary script/HTML via the submit_time parameter on the CF7DBPluginSubmissions pa...

WordPress Contact Form DB Plugin <= 2.8.26 - XSS

This vulnerability allows an attacker to inject arbitrary web script or HTML via the "submittime" parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php. Solution Update the plugin...

WordPress Acobot Live Chat & Contact Form Plugin <= 2.0 - Multiple CSRF

Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that change plugin settings or conduct cross-site scripting attacks. Solution Upgrade the plugin...

WordPress Contact Form DB Plugin <= 2.8.31 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of administrators for requests that delete all plugin records. Solution Upgrade the plugin...

WordPress Acobot Live Chat And Contact Form 2.0 CSRF / XSS

Title: WordPress 'Acobot Live Chat & Contact Form' CSRF/XSS Version: 2.0 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/acobot/ Contacted WordPress: 2015/01/26 ========================================================== Plugin descriptio...

WordPress Contact Form DB 2.8.26 Cross Site Scripting

Title: WordPress 'Contact Form DB' plugin - XSS Version: 2.8.26 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/contact-form-7-to-database-extension/ Contacted WordPress: 2015/01/26...

Contact Form 3.82 - Unauthorized Language Manipulation

The Contact Form by BestWebSoft WordPress plugin was affected by an Unauthorized Language Manipulation security vulnerability...

Multiple Cross-Site Request Forgery Vulnerabilities in Drupal Contact Form Fields

Drupal is a free and open source content management system developed in PHP. Multiple cross-site request forgery vulnerabilities exist in Drupal Contact Form Fields, which can be exploited by an attacker to perform certain unauthorized actions and gain access to affected applications...

SA-CONTRIB-2015-020 - Contact Form Fields - Cross Site Request Forgery (CSRF)

The Contact Form Fields module enables you to create additional fields to site-wide contact form. Some links were not properly protected from CSRF. A malicious user could cause an administrator to delete fields by getting the administrator's browser to make a request to a specially-crafted URL...

WordPress Creative Contact Form 0.9.7 File Upload

File upload vulnerability in WordPress Creative Contact Form plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Contact Form DB Plugin <= 2.8.17 - Reflected XSS

This plugin is prone to a reflected cross site scripting vulnerability in Admin Area. Solution Update the plugin...

CVE-2014-8955

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

Cross site scripting

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

CVE-2014-8955

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

CVE-2014-8955

The CVE-2014-8955 entry describes a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Contact Form Clean and Simple” (also listed as clean-and-simple-contact-form-by-meg-nicholas) versions 4.4.0 and earlier. The issue arises from improper handling of the cscf[name] parameter submi...

WordPress Contact Form Clean and Simple Plugin <= 4.4.0 - XSS

This vulnerability allows the attackers to inject arbitrary web script or HTML via the "cscfname" parameter to contact-us/. Solution Update the plugin...

Creative Contact Form (Wordpress 0.9.7 and Joomla 2.0.0) - Shell Upload Vulnerability

No description provided by source...

Contact Form Clean & Simple <= 4.4.0 - Cross-Site Scripting (XSS)

The Contact Form Clean and Simple WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Clean And Simple Contact Form 4.4.0 XSS

Author : Ajin Abraham Author Website: http://opensecurity.in Affected Product: WordPress Clean and Simple Contact Form Affected Version: = 4.4.0 Vendor: Meg Nicholas Vendor URL: http://www.pluginmirror.com/plugins/clean-and-simple-contact-form-by-meg-nicholas/ WP Plugin URL:...