CVE-2017-18559

Description

References

• wordpress.org/plugins/cforms2 · Release Notes
• wpvulndb.com/vulnerabilities/9727 · Third Party Advisory

More vulnerabilities in cformsii

• CVE-2023-52203MEDIUM 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bastian Germann cformsI…
• CVE-2023-25449HIGH 8.8Cross-Site Request Forgery (CSRF) vulnerability in Oliver Seidel, Bastian Germann cformsII plugin <= 15.0.4 versions.
• CVE-2014-10393MEDIUM 6.1The cforms2 plugin before 10.5 for WordPress has XSS.
• CVE-2014-10392MEDIUM 6.1The cforms2 plugin before 10.2 for WordPress has XSS.
• CVE-2017-18570CRITICAL 9.8The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.