CVE-2014-8955

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...

PT-2014-8758

Name of the Vulnerable Software and Affected Versions Contact Form Clean and Simple plugin versions 4.4.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to the "contact-us/" endpoint. Recommendations F...

CVE-2014-8955: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Contact Form Clean and Simple clean-and-simple-contact-form-by-meg-nicholas plugin 4.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cscfname parameter to contact-us/...