Skip to content
OpenAdvisories

Product · WebDorado

Contact Form Maker

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.0
    CVE-2019-25734

    Contact Form by WD 1.13.1 CSRF to Local File Inclusion

    Contact Form by WD 1.13.1 contains a cross-site request forgery vulnerability combined with local file inclusion that allows unauthenticated attackers to include arbitrary files by exploiting unsanitized action parameters. Attackers can craft malicious forms …

    WebDorado Contact Form Maker