563 matches found
CVE-2017-18613
The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter...
CVE-2017-18613
The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter...
Design/Logic Flaw
The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter...
CVE-2017-18613
The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter...
WordPress contact-form-plugin plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. contact-form-plugin is a contact form plugin used in it. A cross-site scripting vulnerability exists in the WordPress...
WordPress booking-calendar-contact-form plugin cross-site scripting vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress booking-calendar-contact-form plugin. An attacker...
WordPress booking-calendar-contact-form plugin SQL injection vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress booking-calendar-contact-form plugin. An attacker can...
CVE-2013-7481
The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...
CVE-2013-7481
CVE-2013-7481 is a cross-site scripting (XSS) vulnerability in the WordPress plugin contact-form-plugin, affecting versions before 3.3.5. The issue resides in the plugin’s contact_form.php, enabling an attacker to inject script. Remediation: upgrade to version 3.3.5 or later. Other connected sour...
CVE-2013-7481
The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...
PT-2019-7030
Name of the Vulnerable Software and Affected Versions contact-form-plugin plugin versions prior to 3.3.5 for WordPress Description The issue is related to a cross-site scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or...
CVE-2013-7481: Improper Neutralization of Input During Web Page Generation
The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...
CVE-2017-18491
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues...
CVE-2016-10869
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS...
CVE-2015-9295
The contact-form-plugin plugin before 3.96 for WordPress has XSS...
CVE-2013-7475
The contact-form-plugin plugin before 3.52 for WordPress has XSS...
Cross site scripting
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues...
Cross site scripting
The contact-form-plugin plugin before 3.96 for WordPress has XSS...