CVE-2014-6445: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 uE or 2 uC parameter...

PT-2014-7221

Name of the Vulnerable Software and Affected Versions Contact Form 7 Integrations plugin versions 1.0 through 1.3.10 Description The issue allows remote attackers to inject arbitrary web script or HTML via the uE or uC parameters in the includes/toAdmin.php file. This can lead to cross-site...