Constant Contact

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Constant Contact records in CISA KEV

No Constant Contact vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Creative Mail 3 records LOW Constant Contact Forms 2 records LOW

Records

2 records in Constant Contact Forms · all components

TI-2023-28636 CVE-2023-52208 · GHSA-65ph-fjq3-j5hx

WordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data Exposure

LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Constant Contact Constant Contact Forms.This issue affects Constant Contact Forms: from n/a through 2.4.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00443 Published 2024-01-08 No fix listed CWE-200

TI-2021-06426 CVE-2021-24134 · GHSA-5gq5-98jg-gqqf

Constant Contact Forms < 1.8.8 - Multiple Authenticated Stored XSS

LOW 23

Unvalidated input and lack of output encoding in the Constant Contact Forms WordPress plugin, versions before 1.8.8, lead to multiple Stored Cross-Site Scripting vulnerabilities, which allowed high-privileged user (Edito…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00654 Published 2021-03-18 Fixed in 1.8.8 CWE-79

Open these records in search →

Critical	0
High	6
Medium	3
Low	0
No CVSS	0