WordPress Plugin Vulnerabilities

WordPress-to-Lead for Salesforce CRM 1.0 - salesforce.php Multiple Parameter XSS

Description

The Brilliant Web-to-Lead for Salesforce WordPress plugin was affected by a salesforce.php Multiple Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
salesforce-wordpress-to-lead
Fixed in 1.0.1

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
8a1c3778-b34d-409b-86c0-3bd45bc98d59

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-11-27
Title
FAQ Builder AYS < 1.7.2 - Reflected Cross-Site Scripting
Published
2021-09-09
Title
Wise Agent Capture Forms < 3.0 - Reflected Cross-Site Scripting
Published
2024-05-14
Title
Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg < 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-03-05
Title
WP SVG Upload <= 1.0.0 - Author+ Stored XSS via SVG
Published
2021-08-02
Title
SMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site Scripting