CVE-2022-22142

Reflected cross-site scripting vulnerability in the checkbox of phpmailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors...

PT-2022-15270

Name of the Vulnerable Software and Affected Versions php mailform versions prior to 1.40 Description A reflected cross-site scripting issue in the checkbox of php mailform allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations For versions...

PT-2022-15142

Name of the Vulnerable Software and Affected Versions php mailform versions prior to 1.40 Description A reflected cross-site scripting issue in the attached file name allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations For versions prior...

Multiple cross-site scripting vulnerabilities in php_mailform

Overview phpmailform provided by econosys system contains multiple cross-site scripting vulnerabilities listed below. Reflected cross-site scripting vulnerability regarding the checkbox CWE-79 - CVE-2022-22142 Reflected cross-site scripting vulnerability regarding the attached file name CWE-79 -...

Econosys System Php_Mailform 跨站脚本漏洞

Econosys System PhpMailform is a customizable open source Php mail form from Econosys System, Japan. A cross-site scripting vulnerability exists in econosys system phpmailform, which stems from insufficient cleanup of user-supplied data in attached filenames. A remote attacker could trick a victi...