EUVD-2015-9379

Malware in sbrugna...

CVE-2015-9539

The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fscontactform1welcome XSS...

CVE-2024-2956: Improper Neutralization of Input During Web Page Generation

The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 20231101 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

WordPress Fast Secure Contact Form Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Fast Secure Contact Form is a contact form plugin used in it. A cross-site scripting vulnerability exists in WordPress Fast Secure...

CVE-2015-9539: Improper Neutralization of Input During Web Page Generation

The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fscontactform1welcome XSS...

WordPress Fast Secure Contact Form – Clockwork SMS plugin <=2.1.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability found by Elias Dimopoulos in WordPress Fast Secure Contact Form – Clockwork SMS plugin versions =2.1.2. Solution Update the WordPress Fast Secure Contact Form – Clockwork SMS plugin to the latest available version at least 2.4.0...

PT-2019-7498

Name of the Vulnerable Software and Affected Versions Fast Secure Contact Form plugin versions prior to 4.0.38 Description The issue allows for XSS, specifically through the fs contact form1welcome parameter. Recommendations For versions prior to 4.0.38, update to version 4.0.38 or later to resol...

Input validation

The CM Browser - Fast & Secure aka com.ksmobile.cb application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5655

CM Browser - Fast & Secure (com.ksmobile.cb) for Android 5.0.50 does not verify X.509 certificates from SSL servers, enabling MITM via crafted certificates. Root cause: lack of server certificate verification in SSL/TLS validation. Impact: potential exposure of sensitive information. Exploitation...

PT-2014-6640

Name of the Vulnerable Software and Affected Versions CM Browser - Fast & Secure aka com.ksmobile.cb version 5.0.50 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-5655: Undefined Security Weakness

The CM Browser - Fast & Secure aka com.ksmobile.cb application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Fast Secure 3.0.3.1 Cross Site Scripting

Vulnerability ID: HTB23036 Reference: http://www.htbridge.ch/advisory/xssinfastsecurecontactform.html Product: Fast Secure Contact Form wordpress plugin Vendor: Mike Challis http://www.fastsecurecontactform.com Vulnerable Version: 3.0.3.1 and probably prior Tested on: 3.0.3.1 Vendor Notification:...

WordPress Fast Secure Contact Form 3.0.3.1 - Cross Site Scripting

WordPress Fast Secure Contact plugin's "index.php" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker c...

XSS in Fast Secure Contact Form wordpress plugin

Vulnerability ID: HTB23036 Reference: http://www.htbridge.ch/advisory/xssinfastsecurecontactform.html Product: Fast Secure Contact Form wordpress plugin Vendor: Mike Challis http://www.fastsecurecontactform.com Vulnerable Version: 3.0.3.1 and probably prior Tested on: 3.0.3.1 Vendor Notification:...

Cross-site Scripting (XSS) Vulnerability in Fast Secure Contact Form

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Fast Secure Contact Form wordpress plugin, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Fast Secure Contact Form WordPress Plugin Input appended to the URL afte...