Cross site scripting

The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues...

CVE-2017-18559

The CVE-2017-18559 entry concerns the WordPress plugin cforms2. Affected: cforms2 plugin versions prior to 14.13.3. Vulnerability: multiple cross-site scripting (XSS) issues in the plugin. Impact: allows injection of client-side scripts, as described in connected sources. Root cause details are n...

CVE-2017-18559

The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues...

CVE-2014-10377

CVE-2014-10377 affects the WordPress plugin cforms2 (before 13.2). The vulnerability is an XSS in lib_ajax.php within the cforms2 component. The issue allows injection of crafted data leading to potential client-side code execution and partial integrity impact per CVSS 3.1 metrics, with network a...

CVE-2014-10377

The cforms2 plugin before 13.2 for WordPress has XSS in libajax.php...

CVE-2014-10377: Improper Neutralization of Input During Web Page Generation

The cforms2 plugin before 13.2 for WordPress has XSS in libajax.php...

PT-2019-8493 · WordPress · Cforms2

Name of the Vulnerable Software and Affected Versions: cforms2 plugin versions prior to 14.13.3 Description: The issue is related to multiple XSS problems. Recommendations: For versions prior to 14.13.3, update to version 14.13.3 or later to resolve the issue...

CVE-2017-18559: Improper Neutralization of Input During Web Page Generation

The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues...

PT-2019-7053 · WordPress · Cforms2

Name of the Vulnerable Software and Affected Versions: cforms2 plugin versions prior to 13.2 Description: The issue concerns a cross-site scripting XSS problem in the lib ajax.php file of the cforms2 plugin for WordPress. Recommendations: For versions prior to 13.2, update to version 13.2 or late...

CVE-2019-15238

The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field...

CVE-2019-15238

The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field...

Cross site request forgery (csrf)

The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field...

CVE-2019-15238

The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field...

CVE-2019-15238

The entry CVE-2019-15238 concerns the WordPress plugin cforms2 (pre-15.0.2). A CSRF weakness is reported related to the IP address field, affecting the plugin before 15.0.2. The affected component is the cforms2 plugin for WordPress; root cause is CSRF in handling the IP address field. The connec...

CVE-2019-15238: Cross-Site Request Forgery (CSRF)

The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field...

Cforms & CformsII <= 14.10.1 - CAPTCHA Bypass

The cformsII plugin slug: cforms and its fork slug: cforms2 have a CAPTCHA Bypass vulnerability. The MD5 hash for matching the answer is sent with the forms and so it can be overwritten. This is fixed in the fork cforms2 with version 14.11 see changelog for confirmation. The original delicious:da...