PT-2014-5948

Name of the Vulnerable Software and Affected Versions Contact Form by ContactMe.com plugin version 2.3 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the width parameter in the xd...