CVE-2016-1222

Cross-site scripting XSS vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

CVE-2016-1222

CVE-2016-1222 affects Kobe Beauty’s php-contact-form, where a cross-site scripting (XSS) vulnerability exists in versions prior to 2016-05-18. The issue allows an attacker to inject arbitrary script or HTML through a crafted URI (CWE-79). Public sources (JVN/JVNDB) classify the impact as arbitrar...