Lucene search
N/APATCHSTACK:3E7210EBDDD3E573396E75D0EBDF9B50HistorySep 16, 2014 - 12:00 a.m.
WordPress Contact Form 7 Integrations Plugin <= 1.3.10 - Multiple XSS
2014-09-1600:00:00
N/A
patchstack.com
7
0.001 Low
EPSS
Percentile
49.8%
Because of these vulnerabilities in includes/toAdmin.php, the attackers can inject arbitrary web script or HTML via the “uE” or “uC” parameter.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| contact form 7 integrations | le | 1.3.10 |
Related
wpvulndb
wpvulndb
Contact Form 7 Integrations 1.0 - 1.3.10 Multiple Cross-Site scripting (XSS)
2014-10-06 17:23:29
cve
cve
CVE-2014-6445
2014-09-26 21:55:07
nvd
nvd
CVE-2014-6445
2014-09-26 21:55:07
cvelist
cvelist
CVE-2014-6445
2014-09-26 21:00:00
prion
prion
Cross site scripting
2014-09-26 21:55:00
openvas
openvas