CVE-2014-10393

概要

参考情報

• wordpress.org/plugins/cforms2 · Release Notes

cformsii のその他の脆弱性

• CVE-2023-52203中 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bastian Germann cformsI…
• CVE-2023-25449高 8.8Cross-Site Request Forgery (CSRF) vulnerability in Oliver Seidel, Bastian Germann cformsII plugin <= 15.0.4 versions.
• CVE-2014-10392中 6.1The cforms2 plugin before 10.2 for WordPress has XSS.
• CVE-2017-18570緊急 9.8The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.
• CVE-2015-9333緊急 9.8The cforms2 plugin before 14.6.10 for WordPress has SQL injection.