CVE-2020-10385

Mô tả

Tham khảo

• packetstormsecurity.com/files/156910/WordPress-WP-Forms-1.5.8.2-Cross-Site-Scripting.html · Exploit
• wordpress.org/plugins/wpforms-lite · Release Notes
• wpvulndb.com/vulnerabilities/10114 · Third Party Advisory
• getastra.com/blog/911/plugin-exploit/stored-xss-vulnerability-found-in-wpforms-plugin · Exploit
• jinsonvarghese.com/stored-xss-vulnerability-found-in-wpforms-plugin · Exploit

Lỗ hổng khác của contact form

• CVE-2024-11273TRUNG BÌNH 6.1The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape some of its settings,…
• CVE-2023-30500TRUNG BÌNH 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPForms WPForms Lite (wpforms-lite), WPForms WPForms Pro (wpforms) plugins <= …
• CVE-2019-25145TRUNG BÌNH 6.1The Contact Form & SMTP Plugin by PirateForms plugin for WordPress is vulnerable to HTML injection in the ‘public/class-pirateforms-public.p…