CVE-2014-6445

2014-09-2621:55:07

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-6445

cross-site scripting

xss

contact form 7 integrations

wordpress

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) uE or (2) uC parameter.

Affected configurations

NVD

Node

contactuscontact_form_7_integrationsMatch1.3wordpress

contactuscontact_form_7_integrationsMatch1.3.1wordpress

contactuscontact_form_7_integrationsMatch1.3.2wordpress

contactuscontact_form_7_integrationsMatch1.3.3wordpress

contactuscontact_form_7_integrationsMatch1.3.4wordpress

contactuscontact_form_7_integrationsMatch1.3.5wordpress

contactuscontact_form_7_integrationsMatch1.3.6wordpress

contactuscontact_form_7_integrationsMatch1.3.7wordpress

contactuscontact_form_7_integrationsMatch1.3.8wordpress

contactuscontact_form_7_integrationsMatch1.3.9wordpress

contactuscontact_form_7_integrationsMatch1.3.10wordpress

CPENameOperatorVersion
contactus:contact_form_7_integrationscontactus contact form 7 integrationseq1.3
contactus:contact_form_7_integrationscontactus contact form 7 integrationseq1.3.1
contactus:contact_form_7_integrationscontactus contact form 7 integrationseq1.3.2
contactus:contact_form_7_integrationscontactus contact form 7 integrationseq1.3.3
contactus:contact_form_7_integrationscontactus contact form 7 integrationseq1.3.4
contactus:contact_form_7_integrationscontactus contact form 7 integrationseq1.3.5
contactus:contact_form_7_integrationscontactus contact form 7 integrationseq1.3.6
contactus:contact_form_7_integrationscontactus contact form 7 integrationseq1.3.7
contactus:contact_form_7_integrationscontactus contact form 7 integrationseq1.3.8
contactus:contact_form_7_integrationscontactus contact form 7 integrationseq1.3.9

CPE	Name	Operator	Version
contactus:contact_form_7_integrations	contactus contact form 7 integrations	eq	1.3
contactus:contact_form_7_integrations	contactus contact form 7 integrations	eq	1.3.1
contactus:contact_form_7_integrations	contactus contact form 7 integrations	eq	1.3.2
contactus:contact_form_7_integrations	contactus contact form 7 integrations	eq	1.3.3
contactus:contact_form_7_integrations	contactus contact form 7 integrations	eq	1.3.4
contactus:contact_form_7_integrations	contactus contact form 7 integrations	eq	1.3.5
contactus:contact_form_7_integrations	contactus contact form 7 integrations	eq	1.3.6
contactus:contact_form_7_integrations	contactus contact form 7 integrations	eq	1.3.7
contactus:contact_form_7_integrations	contactus contact form 7 integrations	eq	1.3.8
contactus:contact_form_7_integrations	contactus contact form 7 integrations	eq	1.3.9