PT-2015-5560

Name of the Vulnerable Software and Affected Versions Acobot Live Chat & Contact Form plugin version 2.0 Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to change plugin settings or conduct cross-site scripting XSS attacks...

WordPress Contact Form DB Plugin <= 2.8.31 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of administrators for requests that delete all plugin records. Solution Upgrade the plugin...

WordPress Contact Form DB 2.8.26 Cross Site Scripting

Title: WordPress 'Contact Form DB' plugin - XSS Version: 2.8.26 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/contact-form-7-to-database-extension/ Contacted WordPress: 2015/01/26...

WordPress Acobot Live Chat And Contact Form 2.0 CSRF / XSS

Title: WordPress 'Acobot Live Chat & Contact Form' CSRF/XSS Version: 2.0 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2015/01/26 Download: https://wordpress.org/plugins/acobot/ Contacted WordPress: 2015/01/26 ========================================================== Plugin descriptio...

Contact Form 3.82 - Unauthorized Language Manipulation

The Contact Form by BestWebSoft WordPress plugin was affected by an Unauthorized Language Manipulation security vulnerability...

Multiple Cross-Site Request Forgery Vulnerabilities in Drupal Contact Form Fields

Drupal is a free and open source content management system developed in PHP. Multiple cross-site request forgery vulnerabilities exist in Drupal Contact Form Fields, which can be exploited by an attacker to perform certain unauthorized actions and gain access to affected applications...

SA-CONTRIB-2015-020 - Contact Form Fields - Cross Site Request Forgery (CSRF)

The Contact Form Fields module enables you to create additional fields to site-wide contact form. Some links were not properly protected from CSRF. A malicious user could cause an administrator to delete fields by getting the administrator's browser to make a request to a specially-crafted URL...

WordPress Creative Contact Form 0.9.7 File Upload

File upload vulnerability in WordPress Creative Contact Form plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Contact Form DB Plugin <= 2.8.17 - Reflected XSS

This plugin is prone to a reflected cross site scripting vulnerability in Admin Area. Solution Update the plugin...

CVE-2014-8955

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

Cross site scripting

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

CVE-2014-8955

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

CVE-2014-8955

The CVE-2014-8955 entry describes a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Contact Form Clean and Simple” (also listed as clean-and-simple-contact-form-by-meg-nicholas) versions 4.4.0 and earlier. The issue arises from improper handling of the cscf[name] parameter submi...

CVE-2014-8955

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

PT-2014-8758

Name of the Vulnerable Software and Affected Versions Contact Form Clean and Simple plugin versions 4.4.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to the "contact-us/" endpoint. Recommendations F...

CVE-2014-8955: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

WordPress Contact Form Clean and Simple Plugin <= 4.4.0 - XSS

This vulnerability allows the attackers to inject arbitrary web script or HTML via the "cscfname" parameter to contact-us/. Solution Update the plugin...

Creative Contact Form (Wordpress 0.9.7 and Joomla 2.0.0) - Shell Upload Vulnerability

No description provided by source...

Contact Form Clean & Simple <= 4.4.0 - Cross-Site Scripting (XSS)

The Contact Form Clean and Simple WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Clean And Simple Contact Form 4.4.0 XSS

Author : Ajin Abraham Author Website: http://opensecurity.in Affected Product: WordPress Clean and Simple Contact Form Affected Version: = 4.4.0 Vendor: Meg Nicholas Vendor URL: http://www.pluginmirror.com/plugins/clean-and-simple-contact-form-by-meg-nicholas/ WP Plugin URL:...