WordPress Plugin Vulnerabilities
Contact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site Scripting
Description
The plugin does not escape submitted values before displaying them in the HTML, leading to a Stored XSS vulnerability.
Proof of Concept
1. Publish the default form to a page by clicking on "Contact Form to Email" in the sidebar, and the "Publish" button beside the form name. 2. Visit the form on the frontend. Fill in the Email and Subject with arbitrary, valid values. Fill in the Message field with `</textarea><img src=x onerror=alert(/XSS/)>` 3. Submit the form. 4. In the backend, on the "Contact Form to Email" page, click on "Messages" and click the "Edit" button corresponding to the new message. 5. See the XSS has been triggered.
Affects Plugins
References
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Andreas Damen
Submitter
Andreas Damen
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2023-05-16 (about 1 years ago)
Added
2023-05-16 (about 1 years ago)
Last Updated
2023-08-01 (about 9 months ago)