TI-2017-14121 CVE-2017-20055 · GHSA-4g9g-f7m3-gwjm
BestWebSoft Contact Form Plugin Stored cross site scriting
Priority MEDIUM 58
A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0.
BestWebSoft
Records87All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9
Exploited now
BestWebSoft records in CISA KEVNo BestWebSoft vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Contact Form · all components
TI-2012-05433 CVE-2012-10010 · GHSA-g973-76wm-xpmw
BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgery
Priority LOW 38
A vulnerability was found in BestWebSoft Contact Form 3.21.
TI-2017-13664 CVE-2017-18491 · GHSA-w4q2-2657-hfh9
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.
Priority LOW 30
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.
TI-2017-01471 CVE-2017-2171 · GHSA-947h-g3wj-rr28
Cross-site scripting in BestWebSoft Captcha
Priority LOW 29
Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version…
TI-2016-08907 CVE-2016-10869 · GHSA-j4x3-889q-ppj5
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.
Priority LOW 29
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.
TI-2015-07672 CVE-2015-9295 · GHSA-wv2h-fph6-hx6j
The contact-form-plugin plugin before 3.96 for WordPress has XSS.
Priority LOW 29
The contact-form-plugin plugin before 3.96 for WordPress has XSS.
TI-2013-06133 CVE-2013-7481 · GHSA-m9vj-w386-x445
The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.
Priority LOW 29
The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.
TI-2013-06127 CVE-2013-7475 · GHSA-r798-jw6v-q5jp
The contact-form-plugin plugin before 3.52 for WordPress has XSS.
Priority LOW 29
The contact-form-plugin plugin before 3.52 for WordPress has XSS.
TI-2024-02043 CVE-2024-2200 · GHSA-qp6j-fjg3-9x3h
Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subject
Priority LOW 28
The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_subject’ parameter in all versions up to, and including, 4.2.8 due to insufficient input sani…
TI-2014-08395 CVE-2014-125095 · GHSA-7hf8-264p-qj7q
BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scripting
Priority LOW 28
A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic.
TI-2013-06165 CVE-2013-10022 · GHSA-jq78-35r2-82rh
BestWebSoft Contact Form Plugin contact_form.php cntctfrm_check_form cross site scripting
Priority LOW 28
A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress.