WordPress Plugin Vulnerabilities

WordPress-to-Lead for Salesforce CRM 1.0.1 - salesforce.php salesforce_form_shortcode Function Error Message H&ling XSS

Description

The Brilliant Web-to-Lead for Salesforce WordPress plugin was affected by a salesforce.php salesforce_form_shortcode Function Error Message H&ling XSS security vulnerability.

Affects Plugins

Plugin icon
salesforce-wordpress-to-lead
Fixed in 1.0.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
bca5e09b-67c7-4b11-a432-d4b5ddbf0dd6

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-01-31
Title
OWL Carousel <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2018-04-09
Title
WP Live Chat Support < 8.0.06 - Unauthenticated Stored XSS
Published
2023-09-25
Title
WP Matterport Shortcode < 2.1.8 - Contributor+ Stored XSS via shortcode
Published
2023-11-17
Title
Gutenberg < 16.8.1 - Contributor+ Stored XSS
Published
2023-10-31
Title
Login Screen Manager <= 3.5.2 - Stored XSS via CSRF