Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Cfdbplugin Component: Contact Form Db Clear all filters
TI-2015-01829 CVE-2015-2040 · GHSA-32px-gjp5-9f34

Cross-site scripting (XSS) vulnerability in the Contact Form DB (aka CFDB and…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01633 Published 2015-02-20 No fix listed CWE-79
TI-2014-05959 CVE-2014-7139 · GHSA-q3gg-vjpp-5cr5

Multiple cross-site scripting (XSS) vulnerabilities in the Contact Form DB (aka CFDB and…

Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin before 2.8.16 for WordPress allow remote attackers to inject arbitrary web script or H…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02041 Published 2014-10-10 No fix listed CWE-79