Vulnerabilities

TI-2023-02158 CVE-2023-2301 · GHSA-vv4f-mm3r-fgx7

Contact Form Builder by vcita <= 4.10.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

LOW 27

The Contact Form Builder by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.10.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00293 Published 2023-06-03 No fix listed CWE-352

TI-2023-02157 CVE-2023-2300 · GHSA-hvfh-qhgx-vqxm

Contact Form Builder by vcita <= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 29

The Contact Form Builder by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 4.9.1 due to insufficient input sanitization and output esca…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00506 Published 2023-06-03 No fix listed CWE-79

Vulnerabilities

Filters

Contact Form Builder by vcita <= 4.10.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Contact Form Builder by vcita <= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting