Skip to content
OpenAdvisories

Product · wpdevart

Contact Form Builder

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php

    WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting the form_id parameter. Attackers can craft malicious URLs to code_generator.php with s…