Vulnerabilities

TI-2024-02043 CVE-2024-2200 · GHSA-qp6j-fjg3-9x3h

Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subject

LOW 28

The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_subject’ parameter in all versions up to, and including, 4.2.8 due to insufficient input sani…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2024-04-09 No fix listed CWE-79

TI-2014-08395 CVE-2014-125095 · GHSA-7hf8-264p-qj7q

BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scripting

LOW 28

A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00546 Published 2023-04-09 No fix listed CWE-79

TI-2012-05433 CVE-2012-10010 · GHSA-g973-76wm-xpmw

BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgery

LOW 38

A vulnerability was found in BestWebSoft Contact Form 3.21.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00361 Published 2023-04-09 No fix listed CWE-352

TI-2013-06165 CVE-2013-10022 · GHSA-jq78-35r2-82rh

BestWebSoft Contact Form Plugin contact_form.php cntctfrm_check_form cross site scripting

LOW 28

A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00514 Published 2023-04-05 No fix listed CWE-79

TI-2017-14121 CVE-2017-20055 · GHSA-4g9g-f7m3-gwjm

BestWebSoft Contact Form Plugin Stored cross site scriting

MEDIUM 58

A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0084 Published 2022-06-16 No fix listed CWE-80

TI-2013-06133 CVE-2013-7481 · GHSA-m9vj-w386-x445

The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.

LOW 29

The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2019-08-22 No fix listed CWE-79

TI-2017-13664 CVE-2017-18491 · GHSA-w4q2-2657-hfh9

The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.

LOW 30

The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01458 Published 2019-08-13 No fix listed CWE-79

TI-2016-08907 CVE-2016-10869 · GHSA-j4x3-889q-ppj5

The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.

LOW 29

The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2019-08-13 No fix listed CWE-79

TI-2015-07672 CVE-2015-9295 · GHSA-wv2h-fph6-hx6j

The contact-form-plugin plugin before 3.96 for WordPress has XSS.

LOW 29

The contact-form-plugin plugin before 3.96 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2019-08-13 No fix listed CWE-79

TI-2013-06127 CVE-2013-7475 · GHSA-r798-jw6v-q5jp

The contact-form-plugin plugin before 3.52 for WordPress has XSS.

LOW 29

The contact-form-plugin plugin before 3.52 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2019-08-13 No fix listed CWE-79

TI-2017-01471 CVE-2017-2171 · GHSA-947h-g3wj-rr28

Cross-site scripting in BestWebSoft Captcha

LOW 29

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00886 Published 2017-05-22 No fix listed CWE-79

Vulnerabilities

Filters