PT-2017-7562

Name of the Vulnerable Software and Affected Versions cp-contact-form-with-paypal versions prior to 1.1.6 Description The issue concerns SQL injection, which can be exploited through the cp contactformpp id parameter in the cp contactformpp.php file. Recommendations For versions prior to 1.1.6,...

PT-2017-7561

Name of the Vulnerable Software and Affected Versions cp-contact-form-with-paypal versions prior to 1.1.6 Description The issue is related to CSRF with resultant XSS. It is connected to the files cp contactformpp.php and cp contactformpp admin int list.inc.php. Recommendations For versions prior ...