Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 create a field, 2 update a field, 3 delete a field, 4 create a form, 5 update a...

CVE-2015-6965

Multiple cross-site request forgery CSRF vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 create a field, 2 update a field, 3 delete a field, 4 create a form, 5 update a...

CVE-2015-6965

The CVE-2015-6965 entry describes multiple CSRF flaws in the WordPress Contact Form Generator plugin (version 2.0.1 and earlier) that allow an attacker to hijack administrator sessions by issuing crafted requests to the cfg_forms page under wp-admin/admin.php. Affected component is the plugin’s a...

PT-2015-7425

Name of the Vulnerable Software and Affected Versions Contact Form Generator plugin versions 2.0.1 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including creating, updating, or deleting fields, forms, or templates, ...

CVE-2015-6965: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 create a field, 2 update a field, 3 delete a field, 4 create a form, 5 update a...

WordPress Fast Secure Contact Form Plugin <= 4.0.37 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

PT-2019-7498

Name of the Vulnerable Software and Affected Versions Fast Secure Contact Form plugin versions prior to 4.0.38 Description The issue allows for XSS, specifically through the fs contact form1welcome parameter. Recommendations For versions prior to 4.0.38, update to version 4.0.38 or later to resol...

Contact Form Generator <= 2.0.1 - Multiple Cross-Site Request Forgery (CSRF)

The Contact Form Generator : Creative form builder for WordPress WordPress plugin was affected by a Multiple Cross-Site Request Forgery CSRF security vulnerability...

WordPress Contact Form Generator <= 2.0.1 - Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications Live Demos. It is packed with a Template Creator Wizard to create fantastic forms in a matter of seconds without coding. copy of ´contactformgenerator.php´ file =================== TECHNICAL DETAILS =================== A CSRF issue was found i...

WordPress Plugin Contact Form Generator 2.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

WordPress Plugin Contact Form Generator 2.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities Live Demos. It is packed with a Template Creator Wizard to create fantastic forms in a matter of seconds without coding. copy of ´contactformgenerator.php´ file =================== TECHNICAL...

WordPress Contact Form Generator Plugin <= 2.0.1 - Multiple CSRF Vulnerabilities

These multiple vulnerabilities allow an attacker to create form field and inject HTML or JavaScript code without any permission. Also, an attacker can upload form field by injecting HTML or JavaScript code. The same is with templates creation and update. Solution Upgrade the plugin...

WordPress Plugin Contact Form Generator 2.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Live Demos. It is packed with a Template Creator Wizard to create fantastic forms in a matter of seconds without coding. copy of ´contactformgenerator.php´ file =================== TECHNICAL DETAILS =================== A CSRF issue was found in the latest version of the plugin for wordpress...

gainesreptiles.com XSS vulnerability

Vulnerable URL: http://www.gainesreptiles.com/contact.php?subject=Male=Dopasia+gracilis=ℑ=foo.png" onerror=alert/XSSPOSED/ / Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

WordPress CP Contact Form with Paypal Plugin Scripting Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.CP Contact Form with Paypal is a support for adding Paypal commonly used contacts to the Worpress website plugin. WordPress CP Contact Form with Paypal...

WordPress Contact Form Plugin <= 1.1.9 - SQL Injection

Because of this vulnerability, authenticated users can execute arbitrary SQL commands via " post-new.php". Solution Update the plugin...

myap.inside24.info XSS vulnerability

Open Bug Bounty ID: OBB-71874 Description| Value ---|--- Affected Website:| myap.inside24.info Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

WordPress CP Contact Form with Paypal Plugin 1.1.5 - Multiple Vulnerabilities

There are multiple vulnerabilities in this plugin, such as CSRF, XSS and SQL injection. These vulnerabilities allow an attacker to add or delete forms, export CSV files of the messages and modify settings of the form. Solution Upgrade to version 1.1.6...

WordPress CP Contact Form With Paypal 1.1.5 CSRF / XSS / SQL Injection Vulnerabilities

WordPress CP Contact Form with Paypal plugin version 1.1.5 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities. Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5...

WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities

WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 Submitter: Nitin Venkatesh Product: CP Contact Form with Paypal Wordpress Plugin Product...

WordPress Plugin CP Contact Form with Paypal 1.1.5 - Multiple Vulnerabilities

Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 Submitter: Nitin Venkatesh Product: CP Contact Form with Paypal Wordpress Plugin Product URL: https://wordpress.org/plugins/cp-contact-form-with-paypal/ Vulnerability...