CVE-2021-42361

The Contact Form Email WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the name parameter found in the /trunk/cp-admin-int-list.inc.php file which allowed attackers with administrative user access to inject arbitrary web scripts,...

PT-2021-23593

Name of the Vulnerable Software and Affected Versions Contact Form Email WordPress plugin versions up to and including 1.3.24 Description The issue arises from insufficient input validation and escaping via the name parameter in the /trunk/cp-admin-int-list.inc.php file, allowing attackers with...

CVE-2021-42361: Improper Neutralization of Input During Web Page Generation

The Contact Form Email WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the name parameter found in the /trunk/cp-admin-int-list.inc.php file which allowed attackers with administrative user access to inject arbitrary web scripts,...