CVE-2008-0197 (WP-ContactForm) |
|
| BugsAlert Home > CVE-2008-0197 (WP-ContactForm) | |
|
Multiple cross-site scripting (XSS) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wpcf_email, (2) wpcf_subject, (3) wpcf_question, (4) wpcf_answer, (5) wpcf_success_msg, (6) wpcf_error_msg, or (7) wpcf_msg parameter to wp-admin/admin.php, or (8) the SRC attribute of an IFRAME element. Original Source: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0197 Learn more about CVE-2008-0197 (WP-ContactForm) |
|
| Tags: cve-2008-0197 wp-contactform | |
Related Items |
|
|
Debian: New iceweasel packages fix several vulnerabilities
|
|
|
CVE-2008-1442 (Internet Explorer)
|
|
|
CVE-2008-5209 (admidio)
|
|
|
Neutrino Atomic Edition Security Bypass Vulnerability
|
|
|
VMware Opens Hypervisor to Security Vendors
|
|
|
CafeEngine "id" Two SQL Injection Vulnerabilities
|
|
|
CVE-2008-2609 (oracle_portal_component, Oracle Application Server)
|
|
