Extension WordPress
Vulnérabilités Contact Form by FormGet – Best Form Builder Plugin for WordPress
Cette page rassemble les failles publiées pour Contact Form by FormGet – Best Form Builder Plugin for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Contact Form by FormGet – Best Form Builder Plugin for WordPress
2 fiches
Contact Form by FormGet <= 5.5.5 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Contact Form by FormGet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formget' shortcode in versions up to, and including, 5.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…
*-5.5.5
Non indiqué
22/09/2023
Contact Form by FormGet < 5.3.1 – Authenticated Stored Cross-Site Scripting
The Contact Form by FormGet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘value’ parameter in versions before 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to…
[*, 5.3.1)
5.3.1
07/03/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.