6168 matches found
CVE-2015-9295
The contact-form-plugin plugin before 3.96 for WordPress has XSS...
Cross site scripting
The contact-form-plugin plugin before 3.96 for WordPress has XSS...
Cross site scripting
The contact-form-to-email plugin before 1.2.66 for WordPress has XSS...
Cross site scripting
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues...
Design/Logic Flaw
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS...
Cross site scripting
The contact-form-plugin plugin before 3.52 for WordPress has XSS...
Cross site scripting
The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS...
Cross site scripting
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues...
Cross site scripting
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues...
Cross site request forgery (csrf)
The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF...
CVE-2017-18489
The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS...
CVE-2017-18489
CVE-2017-18489 affects the WordPress plugin Contact Form 7 SMS Addon prior to v2.4.0. The vulnerability is a reflected XSS in the file that prints the GET parameter 'to' (vulnerability in plugins/clockwork-two-factor-authentication/templates/clockwork-test-message.php per PoC). Exploitation targe...
CVE-2017-18490
The CVE-2017-18490 entry concerns the WordPress plugin contact-form-multi prior to version 1.2.1, which has multiple XSS issues (CWE-79). The NVD and connected Nuclei/WP- vulnerability data confirm that authenticated attackers can execute arbitrary JavaScript in victims’ browsers, potentially ste...
CVE-2017-18490
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues...
CVE-2017-18491
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues...
CVE-2017-18491
The CVE-2017-18491 entry corresponds to the WordPress plugin “Contact Form by BestWebSoft” up to version 4.0.6, which has multiple XSS flaws. The Nuclei template and related sources confirm the vulnerability affects this plugin and describe the impact: authenticated attackers can inject and execu...
CVE-2016-10869
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS...
CVE-2016-10869
CVE-2016-10869 affects the WordPress plugin contact-form-plugin up to version 4.0.2 . The vulnerability is an XSS flaw in the plugin (WordPress context), with CVSS v3 base score 6.1 (MEDIUM) and CVSS v2 base score 4.3 (MEDIUM) . Multiple sources (NVD, Red Hat, CNVD, CVE lists, WPVulnDB) corrobora...
CVE-2015-9295
The WordPress plugin contact-form-plugin is affected by an XSS vulnerability in versions before 3.96. The issue is described across multiple sources (including Red Hat and CVE records) as a client-side script execution vulnerability in the plugin, with no public exploit details provided in the do...