WordPress Plugin Vulnerabilities

Contact Form Manager < 1.4.4 - CSRF & Cross-Site Scripting (XSS)

Description

The Contact Form Manager WordPress plugin was affected by a CSRF & Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
contact-form-manager
Fixed in 1.4.4

References

Exploitdb
41483
URL
https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.html
URL
https://seclists.org/fulldisclosure/2017/Feb/99

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
9e516e12-6661-4b94-b12d-565ccf900a28

Timeline

Publicly Published
2017-03-01 (about 9 years ago)
Added
2017-03-02 (about 9 years ago)
Last Updated
2023-12-08 (about 2 years ago)

Other

Published
Title
Published
2019-06-08
Title
Breadcrumbs by menu < 1.0.3 - Multiple Issues
Published
2019-04-05
Title
Form Maker by 10Web < 1.13.5 - Cross-Site Request Forgery (CSRF) to LFI
Published
2016-07-19
Title
Icegram <= 1.9.18 - Cross-Site Request Forgery (CSRF) & XSS
Published
2016-05-18
Title
Fluid Responsive Slideshow <= 2.2.6 - CSRF & XSS
Published
2016-05-11
Title
Event Registration 6.02.02 - SQL Injection & Stored XSS