Constant Contact Forms Security Vulnerabilities and Issues — Constant Contact Forms CVE List

Lucene search

MailmunchConstant Contact Forms

2 matches found

CVE•added 2024/11/13 2:15 a.m.•49 views

CVE-2024-9614

The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary ...

6.1CVSS6AI score0.00248EPSS

CVE•added 2024/01/13 12:15 a.m.•41 views

CVE-2024-22137

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch Constant Contact Forms by MailMunch allows Stored XSS.This issue affects Constant Contact Forms by MailMunch: from n/a through 2.0.11.

6.5CVSS5.8AI score0.00077EPSS