Skip to content
OpenAdvisories

Vendor

Anssi Laitila

7 known vulnerabilities.

Products

Shared Files 3 Shared Files – Frontend File Upload Form & Secure File Sharing 2 Contact List 1 Contact List – Online Staff Directory & Address Book 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-3516 Public exploit

    Contact List <= 3.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_cl_map_iframe' Parameter

    The Contact List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_cl_map_iframe' parameter in all versions up to, and including, 3.0.18. This is due to insufficient input sanitization and output escaping when handling the Google Map…

    Anssi Laitila Contact List – Online Staff Directory & Address Book Web / CMS