CVE-2017-20055

概要

参考情報

• seclists.org/fulldisclosure/2017/Feb/100 · Exploit
• sumofpwn.nl/advisory/2016/stored_cross_site_scripting_vulnerability_in_contact_form_wordpress_plugin.html · Exploit
• vuldb.com · Third Party Advisory

contact form のその他の脆弱性

• CVE-2024-2200中 6.1The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_subject’ para…
• CVE-2014-125095中 6.1A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the…
• CVE-2012-10010高 8.8A vulnerability was found in BestWebSoft Contact Form 3.21. It has been classified as problematic. This affects the function cntctfrm_settin…
• CVE-2013-10022中 6.1A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this …
• CVE-2013-7481中 6.1The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.