Cross site scripting

2014-09-2621:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) uE or (2) uC parameter.

CPENameOperatorVersion
contact_form_7_integrationseq1.3.7
contact_form_7_integrationseq1.3.5
contact_form_7_integrationseq1.3.9
contact_form_7_integrationseq1.3.4
contact_form_7_integrationseq1.3
contact_form_7_integrationseq1.3.8
contact_form_7_integrationseq1.3.3
contact_form_7_integrationseq1.3.2
contact_form_7_integrationseq1.3.10
contact_form_7_integrationseq1.3.1

Name	Operator	Version
contact_form_7_integrations	eq	1.3.7
contact_form_7_integrations	eq	1.3.5
contact_form_7_integrations	eq	1.3.9
contact_form_7_integrations	eq	1.3.4
contact_form_7_integrations	eq	1.3
contact_form_7_integrations	eq	1.3.8
contact_form_7_integrations	eq	1.3.3
contact_form_7_integrations	eq	1.3.2
contact_form_7_integrations	eq	1.3.10
contact_form_7_integrations	eq	1.3.1