CVE-2014-4583: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in forms/messages.php in the WP-Contact wp-contact-sidebar-widget plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 edit, 2 orderdirection, 3 limitstart, 4 id, or 5 order parameter...

PT-2014-5997

Name of the Vulnerable Software and Affected Versions WP-Contact wp-contact-sidebar-widget plugin version 1.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters in forms/messages.php. The vulnerable parameters include edit,...