Lucene search
+L

61 matches found

Cvelist
Cvelist
•added 2023/04/25 4:56 p.m.•40 views

CVE-2022-47608 WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/04/25 12:00 a.m.•16 views

WordPress Plugin Quick Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/25 12:00 a.m.•7 views

CVE-2022-47608: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References3
OSV
OSV
•added 2023/04/07 12:15 p.m.•10 views

CVE-2023-23885

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

5.4CVSS6.7AI score0.00386EPSS
SaveExploits0References1
NVD
NVD
•added 2023/04/07 12:15 p.m.•32 views

CVE-2023-23885

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

6.5CVSS5.8AI score0.00386EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/04/07 11:46 a.m.•13 views

CVE-2023-23885 WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

6.5CVSS5.8AI score0.00386EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/04/07 11:46 a.m.•41 views

CVE-2023-23885 WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

6.5CVSS6AI score0.00386EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/07 11:46 a.m.•89 views

CVE-2023-23885

Summary of CVE-2023-23885 : Affected: WordPress Quick Contact Form plugin

6.5CVSS5.3AI score0.00386EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/07 12:00 a.m.•6 views

CVE-2023-23885: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Contact Form plugin = 8.0.3.1 versions...

6.5CVSS7.9AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/04/07 12:00 a.m.•1 views

PT-2023-19282

Name of the Vulnerable Software and Affected Versions Fullworks Quick Contact Form plugin versions prior to 8.0.3.2 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or higher-privileged users. There is no...

6.5CVSS5.8AI score0.00386EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/04/07 12:00 a.m.•15 views

WordPress plugin Quick Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

6.5CVSS6.4AI score0.00386EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/02/15 12:00 a.m.•26 views

WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Quick Contact Form Type Plugin Vulnerable versions = 8.0.3.1 Fixed in 8.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47608 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 812779e462bf Credits yuyudhn Required...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
•added 2023/02/06 12:00 a.m.•23 views

Quick Contact Form < 8.0.4 - Contributor+ Stored XSS

The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.5CVSS5.2AI score0.00386EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2023/02/06 12:00 a.m.•20 views

WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Quick Contact Form Type Plugin Vulnerable versions = 8.0.3.1 Fixed in 8.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23885 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1ea94a82999e Credits yuyudhn Required...

6.5CVSS5.8AI score0.00386EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2023/02/06 12:00 a.m.•25 views

WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Broken Access Control

Software Quick Contact Form Type Plugin Vulnerable versions = 8.0.3.1 Fixed in 8.0.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25035 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 4879b77b9e44 Credits yuyudhn Required...

6.3AI score0.00714EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•12 views

WordPress Quick Contact Form plugin < 8.0.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Quick Contact Form plugin versions 8.0.2. Solution Update the WordPress Quick Contact Form plugin to the latest available version at least 8.0.2...

3AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•13 views

WordPress Quick Contact Form plugin < 8.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Quick Contact Form plugin versions 8.0.2. Solution Update the WordPress Quick Contact Form plugin to the latest available version at least 8.0.2...

4.6AI score
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
•added 2014/08/01 10:59 a.m.•9 views

Quick Contact Form 6.2 - Unspecified XSS

The Quick Contact Form WordPress plugin was affected by an Unspecified XSS security vulnerability...

3AI score
SaveExploits0Affected Software1
zdt
zdt
•added 2013/10/09 12:00 a.m.•27 views

Wordpress Quick Contact Form Plugin 6.0 - Persistent XSS

Exploit for php platform in category web applications TITLE ===== Quick Contact Form - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x DATE ==== 10/06/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================ Quick Contact Form Wordpress...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2013/10/08 12:00 a.m.•25 views

WordPress Quick Contact Form 6.0 Cross Site Scripting

=============================================================================== | | / / / / / / // / / -alertString.fromCharCode90,121,48,100,48,120 --- SNIP --- If the message has been sent successfully a alert diolog will apear containing Zy0d0x when an user checks there message in the...

0.2AI score
SaveExploits0
Rows per page
Query Builder