Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
BestwebsoftContact Form

11 matches found

CVE
CVE•added 2024/04/09 7:15 p.m.•56 views

CVE-2024-2200

The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_subject’ parameter in all versions up to, and including, 4.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attack...

6.1CVSS8.4AI score0.00937EPSS
CVE
CVE•added 2017/05/22 4:29 p.m.•51 views

CVE-2017-2171

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to...

6.1CVSS6.1AI score0.00233EPSS
CVE
CVE•added 2019/08/13 5:15 p.m.•45 views

CVE-2017-18491

The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.

6.1CVSS6AI score0.00104EPSS
CVE
CVE•added 2019/08/13 5:15 p.m.•42 views

CVE-2015-9295

The contact-form-plugin plugin before 3.96 for WordPress has XSS.

6.1CVSS6.4AI score0.0019EPSS
CVE
CVE•added 2023/04/09 6:15 a.m.•41 views

CVE-2012-10010

A vulnerability was found in BestWebSoft Contact Form 3.21. It has been classified as problematic. This affects the function cntctfrm_settings_page of the file contact_form.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to versio...

8.8CVSS6.5AI score0.00052EPSS
CVE
CVE•added 2019/08/13 5:15 p.m.•35 views

CVE-2013-7475

The contact-form-plugin plugin before 3.52 for WordPress has XSS.

6.1CVSS6.4AI score0.0019EPSS
CVE
CVE•added 2019/08/13 5:15 p.m.•35 views

CVE-2016-10869

The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.

6.1CVSS6.4AI score0.0019EPSS
CVE
CVE•added 2023/04/05 1:15 p.m.•34 views

CVE-2013-10022

A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this issue is the function cntctfrm_display_form/cntctfrm_check_form of the file contact_form.php. The manipulation leads to cross site scripting. The attack may be...

6.1CVSS4.8AI score0.00058EPSS
CVE
CVE•added 2019/08/22 1:15 p.m.•33 views

CVE-2013-7481

The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.

6.1CVSS6.4AI score0.0019EPSS
CVE
CVE•added 2023/04/09 6:15 a.m.•31 views

CVE-2014-125095

A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the function bws_add_menu_render of the file bws_menu/bws_menu.php. The manipulation of the argument bwsmn_form_email leads to cross site scripting. The attack ma...

6.1CVSS4.8AI score0.00078EPSS
CVE
CVE•added 2022/06/16 1:15 p.m.•28 views

CVE-2017-20055

A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...

5.4CVSS4.5AI score0.00257EPSS