Cross site scripting

The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues...

Cross site scripting

The contact-form-plugin plugin before 3.96 for WordPress has XSS...

Cross site scripting

The contact-form-plugin plugin before 3.52 for WordPress has XSS...

CVE-2017-18491

The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues...

CVE-2017-18491

The CVE-2017-18491 entry corresponds to the WordPress plugin “Contact Form by BestWebSoft” up to version 4.0.6, which has multiple XSS flaws. The Nuclei template and related sources confirm the vulnerability affects this plugin and describe the impact: authenticated attackers can inject and execu...

CVE-2015-9295

The WordPress plugin contact-form-plugin is affected by an XSS vulnerability in versions before 3.96. The issue is described across multiple sources (including Red Hat and CVE records) as a client-side script execution vulnerability in the plugin, with no public exploit details provided in the do...

CVE-2015-9295

The contact-form-plugin plugin before 3.96 for WordPress has XSS...

CVE-2013-7475

CVE-2013-7475 : The WordPress plugin contact-form-plugin is vulnerable to cross-site scripting in all versions before 3.52. The vulnerability is due to an XSS flaw in the plugin and affects the WordPress integration; exploitation details or in-the-wild status are not provided in the documents. No...

PT-2019-8426

Name of the Vulnerable Software and Affected Versions contact-form-plugin versions prior to 4.0.6 Description The issue is related to multiple XSS problems. Recommendations For versions prior to 4.0.6, update to version 4.0.6 or later to resolve the issue...

PT-2019-7665

Name of the Vulnerable Software and Affected Versions contact-form-plugin versions prior to 4.0.2 Description The issue affects the contact-form-plugin plugin for WordPress, allowing for cross-site scripting XSS attacks. Recommendations For versions prior to 4.0.2, update to version 4.0.2 or late...

PT-2019-7024

Name of the Vulnerable Software and Affected Versions contact-form-plugin plugin versions prior to 3.52 for WordPress Description The issue is related to a cross-site scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or...

CVE-2016-10869: Improper Neutralization of Input During Web Page Generation

The contact-form-plugin plugin before 4.0.2 for WordPress has XSS...

CVE-2015-9295: Improper Neutralization of Input During Web Page Generation

The contact-form-plugin plugin before 3.96 for WordPress has XSS...

CVE-2013-7475: Improper Neutralization of Input During Web Page Generation

The contact-form-plugin plugin before 3.52 for WordPress has XSS...

CVE-2017-18491: Improper Neutralization of Input During Web Page Generation

The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues...

PT-2019-7254

Name of the Vulnerable Software and Affected Versions contact-form-plugin plugin versions prior to 3.96 for WordPress Description The issue is related to a cross-site scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or...

WordPress Booking Calendar Contact Form Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress Booking Calendar Contact Form plugin suffers from a SQL injection vulnerability by adding specially crafted shortco...

WordPress N-Media Website Contact Form Plugin File Upload Vulnerability

WordPress N-Media Website Contact Form Plugin is prone to arbitrary file upload vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2014-4518

Cross-site scripting XSS vulnerability in xdresize.php in the Contact Form by ContactMe.com plugin 2.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the width parameter...

WordPress Plugin Contact Form 2.7.5 - SQL Injection

WordPress Plugin Contact Form 2.7.5 - SQL Injection Exploit Title: WordPress Contact Form plugin 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpcfeasyformsubmitted=1&wpcfeasyformtest1=testing&wpcfeasyformformid=1 AND...