WordPress Plugin Contact Form DB Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed in the PHP language, which supports personal blog sites on PHP and MySQL servers.Contact Form DB also known as CFDB and contact-form-7-to-database-extension is one of the plugins that can submit the create and...

PT-2015-5561

Name of the Vulnerable Software and Affected Versions Contact Form DB plugin version 2.8.26 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the submit time parameter in the "CF7DBPluginSubmissions" page to "wp-admin/admin.php"...