CVE-2020-10385

概要

参考情報

• packetstormsecurity.com/files/156910/WordPress-WP-Forms-1.5.8.2-Cross-Site-Scripting.html · Exploit
• wordpress.org/plugins/wpforms-lite · Release Notes
• wpvulndb.com/vulnerabilities/10114 · Third Party Advisory
• getastra.com/blog/911/plugin-exploit/stored-xss-vulnerability-found-in-wpforms-plugin · Exploit
• jinsonvarghese.com/stored-xss-vulnerability-found-in-wpforms-plugin · Exploit

contact form のその他の脆弱性

• CVE-2024-11273中 6.1The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape some of its settings,…
• CVE-2023-30500中 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPForms WPForms Lite (wpforms-lite), WPForms WPForms Pro (wpforms) plugins <= …
• CVE-2019-25145中 6.1The Contact Form & SMTP Plugin by PirateForms plugin for WordPress is vulnerable to HTML injection in the ‘public/class-pirateforms-public.p…