CVE-2017-20053

The CVE-2017-20053 affects the XYZScripts Contact Form Manager Plugin for WordPress. It is a cross-site request forgery in an unknown functionality that can be exploited remotely to change settings; no privileges are required but user interaction is needed. No patch/version remediation details ar...

CVE-2017-20054

CVE-2017-20054 concerns a basic cross-site scripting vulnerability in the XYZScripts Contact Form Manager Plugin (WordPress ecosystem). The issue affects an unspecified portion of functionality, can be triggered remotely, and the exploit has been disclosed publicly. The connected records confirm ...