CVE-2014-7238

The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...

Cross site scripting

The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...

CVE-2014-7238

The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...

CVE-2014-7238

The CVE-2014-7238 entry concerns a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Contact Form Integrated With Google Maps” version 1.0–2.4. Descriptions in connected sources consistently identify the flaw as Stored XSS within that plugin; there are no details in the pro...

PT-2020-7733

Name of the Vulnerable Software and Affected Versions Contact Form Integrated With Google Maps versions 1.0 through 2.4 Description The issue is related to Stored XSS. Recommendations For versions 1.0 through 2.4, update to a version that contains a fix for this issue...

CVE-2014-7238: Improper Neutralization of Input During Web Page Generation

The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...

WordPress Contact Form Clean and Simple plugin <= 4.7.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found by Jeroen Mulder in WordPress Contact Form Clean and Simple plugin versions = 4.7.0. Solution 01.22.2020 - we were unable to find a patched version of this plugin...

Contact Form Clean and Simple < 4.7.1 - Authenticated Stored XSS

The Contact Form Clean and Simple WordPress plugin was vulnerable to Authenticated stored XSS. When a user has admin capabilities, malicious code can be submitted through the plugin's options. This code will then be executed on every page with the contact form on the front-end. By checking the...

WordPress Fast Secure Contact Form Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Fast Secure Contact Form is a contact form plugin used in it. A cross-site scripting vulnerability exists in WordPress Fast Secure...

Cross site scripting

The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fscontactform1welcome XSS...

CVE-2015-9539

The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fscontactform1welcome XSS...

CVE-2015-9539

The CVE-2015-9539 entry concerns the WordPress plugin Fast Secure Contact Form. Affects versions prior to 4.0.38, where the fs_contact_form1[welcome] parameter is vulnerable to cross-site scripting (XSS). Root cause is insufficient input validation/escaping in the form handling, enabling attacker...

CVE-2015-9539: Improper Neutralization of Input During Web Page Generation

The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fscontactform1welcome XSS...

Cross-site Scripting in YII2-CMS

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

WordPress contact-form-plugin plugin cross-site scripting vulnerability (CNVD-2019-36080)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress contact-form-plugin plugin cross-site scripting vulnerability (CNVD-2019-36071)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress contact-form-plugin plugin cross-site scripting vulnerability (CNVD-2019-36081)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress contact-form-to-email plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-to-email is a plugin used to send contact form information to an email address. A cross-site request forgery vulnerabilit...

WordPress contact-form-to-email plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-to-email is a plugin used to send contact form information to an email address. A cross-site scripting vulnerability exis...

WordPress new-contact-form-widget plugin SQL Injection Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. new-contact-form-widget is a contact form builder plugin used in it. A SQL injection vulnerability exists in the WordPress...