Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Contact_form_email
(Codepeople)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 7 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2023-12-11 | CVE-2023-5955 | The Contact Form Email WordPress plugin before 1.3.44 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) | Contact_form_email | 4.8 | ||
| 2024-04-10 | CVE-2024-31302 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44. | Contact_form_email | 5.3 | ||
| 2023-06-12 | CVE-2023-2718 | The Contact Form Email WordPress plugin before 1.3.38 does not escape submitted values before displaying them in the HTML, leading to a Stored XSS vulnerability. | Contact_form_email | 5.4 | ||
| 2021-11-17 | CVE-2021-42361 | The Contact Form Email WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the name parameter found in the ~/trunk/cp-admin-int-list.inc.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.3.24. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled. | Contact_form_email | 4.8 | ||
| 2019-08-13 | CVE-2018-20964 | The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF. | Contact_form_email | 8.8 | ||
| 2019-08-13 | CVE-2018-20963 | The contact-form-to-email plugin before 1.2.66 for WordPress has XSS. | Contact_form_email | 6.1 | ||
| 2019-03-10 | CVE-2019-9646 | The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the "custom edition area." | Contact_form_email | 6.1 |