CVE-2014-8739

The Creative Solutions Creative Contact Form (formerly Sexy Contact Form) is vulnerable to an unrestricted file upload vulnerability in the jQuery File Upload Plugin 6.4.4 (specifically in server/php/UploadHandler.php). This flaw affects versions before 1.0.0 for WordPress and before 2.0.1 for Jo...

CVE-2020-9364

CVE-2020-9364 affects Creative Contact Form for Joomla (versions 4.6.2 and earlier). A directory traversal flaw exists in the helpers/mailer.php file, in the filename field for uploaded attachments processed via the creativecontactform_upload parameter. An attacker could abuse the "Send me a copy...