contactus vulnerabilities

Products

• contact form 7 integrations 1

Latest contactus CVEs

Newest publication first

1. CVE-2014-6445 Contact Form 7 Integrations 1.0 - 1.3.10 - Multiple Cross-Site scripting

   Published 2014-09-26

   Medium·CVSS 4.3 EPSS 1.6%

   Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) uE or (2) uC parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.