PT-2022-7926

Name of the Vulnerable Software and Affected Versions XYZScripts Contact Form Manager Plugin affected versions not specified Description A vulnerability was found in the XYZScripts Contact Form Manager Plugin, which has been declared as problematic. The manipulation of an unknown functionality...

CVE-2017-20053: Cross-Site Request Forgery (CSRF)

A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the...

WordPress Form Manager Code Execution Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Form Manager plugin is one of the form management plugin . A security vulnerability exists in the...

Sql injection

Eval injection vulnerability in the fmsaveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-7806

Eval injection vulnerability in the fmsaveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-7806

Eval injection vulnerability in the fmsaveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-7806

The CVE-2015-7806 issue affects the WordPress Form Manager plugin (prior to 1.7.3). The vulnerability is in the fm_saveHelperGatherItems function of ajax.php, enabling remote code execution via unspecified vectors. Multiple sources confirm RCE potential, including CNVD and WPVulndB entries noting...

CVE-2015-7806

Eval injection vulnerability in the fmsaveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-7806: Improper Neutralization of Special Elements used in a Command

Eval injection vulnerability in the fmsaveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors...

PT-2017-7275

Name of the Vulnerable Software and Affected Versions Form Manager plugin versions prior to 1.7.3 Description The issue concerns an eval injection vulnerability in the fm saveHelperGatherItems function within the ajax.php file of the Form Manager plugin for WordPress. This allows remote attackers...

WordPress Contact Form Manager CSRF / XSS

------------------------------------------------------------------------ Cross-Site Request Forgery & Cross-Site Scripting in Contact Form Manager WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...

Multiple Vulnerabilities in WordPress Contact Form Manager Plugin

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Cross-site scripting and cross-site request forgery vulnerabilities exist in the WordPress Contact Form Manager...

Contact Form Manager - CSRF & Cross-Site Scripting (XSS)

The Contact Form Manager WordPress plugin was affected by a CSRF & Cross-Site Scripting XSS security vulnerability...

WordPress Contact Form Manager Plugin - Cross-Site Request Forgery / Cross-Site Scripting Vulnerabil

Exploit for php platform in category web applications !-- Source: https://sumofpwn.nl/advisory/2016/crosssiterequestforgerycrosssitescriptingincontactformmanagerwordpressplugin.html Abstract It was discovered that Contact Form Manager does not protect against Cross-Site Request Forgery. This allo...

WordPress Plugin Contact Form Manager - Cross-Site Request Forgery Cross-Site Scripting

WordPress Plugin Contact Form Manager - Cross-Site Request Forgery Cross-Site Scripting !-- Source: https://sumofpwn.nl/advisory/2016/crosssiterequestforgerycrosssitescriptingincontactformmanagerwordpressplugin.html Abstract It was discovered that Contact Form Manager does not protect against...

WordPress Plugin Contact Form Manager - Cross-Site Request Forgery / Cross-Site Scripting

!-- Source: https://sumofpwn.nl/advisory/2016/crosssiterequestforgerycrosssitescriptingincontactformmanagerwordpressplugin.html Abstract It was discovered that Contact Form Manager does not protect against Cross-Site Request Forgery. This allows an attacker to change arbitrary Contact Form Manage...

WordPress Contact Form Manager Plugin <= 1.4.1 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

Contact Form Manager <= 1.4.1 - Authenticated Reflected Cross-Site Scripting (XSS)

The Contact Form Manager WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

Form Manager <= 1.7.2 - Authenticated Remote Comm& Execution (RCE)

The wordpress-form-manager WordPress plugin was affected by an Authenticated Remote Comm& Execution RCE security vulnerability...