CVE-2017-20053 XYZScripts Contact Form Manager Plugin cross-site request forgery
MediumCVSS 4.3
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xyzscripts contact form manager | All versions | No fix listed |
| xyzscripts Contact Form Manager Plugin | All versions | No fix listed |
| wordpress contact-form-manager(WordPress) | < 1.4.4 | 1.4.4 |
References
- seclists.org exploit mailing-list third-party-advisory
- sumofpwn.nl exploit third-party-advisory
- vuldb.com third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org