Lucene search
N/APATCHSTACK:C714F9237A0CC2769C4811D396812C78HistoryApr 13, 2016 - 12:00 a.m.
WordPress Pondol Form to Mail Plugin <= 1.1 - Cross Site Scripting (XSS)
2016-04-1300:00:00
N/A
patchstack.com
13
EPSS
0.001
Percentile
46.3%
Because of this vulnerability, the variable itemid appears to send unsanitized data back to the users browser. Vulnerable file is pondol-formmail/pages/admin-mail-info.php.
Solution
Update the plugin.
Related
wpvulndb
wpvulndb
patchstack
patchstack
WordPress Pondol Form to Mail Plugin <= 1.1 - Cross Site Scripting (XSS)
2016-04-13 00:00:00
cve
cve
CVE-2016-1000146
2016-10-10 20:59:24
cvelist
cvelist
CVE-2016-1000146
2016-10-10 20:00:00
nuclei
nuclei
WordPress Pondol Form to Mail <=1.1 - Cross-Site Scripting
2021-08-08 23:17:34
prion
prion
Cross site scripting
2016-10-10 20:59:00
nvd
nvd
CVE-2016-1000146
2016-10-10 20:59:24