WordPress Plugin Vulnerabilities

Contact Form 3.36 - contact_form.php cntctfrm_contact_email Parameter XSS

Description

The Contact Form by BestWebSoft WordPress plugin was affected by a contact_form.php cntctfrm_contact_email Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
contact-form-plugin
Fixed in 3.82

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
eff98e15-0075-48f9-a2c3-4375a762cfb5

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-11-27 (about 10 years ago)

Other

Published
Title
Published
2018-10-08
Title
WPML < 4.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Published
2025-04-01
Title
Design Blocks <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-04-18
Title
eCommerce Product Catalog Plugin for WordPress < 3.3.33 - Reflected Cross-Site Scripting
Published
2026-01-16
Title
Quote Master <= 7.1.1 - Reflected Cross-Site Scripting
Published
2025-11-04
Title
Ohio Extra < 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting