Product:

Contact_form

(Bestwebsoft)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 10
Date Id Summary Products Score Patch Annotated
2023-04-09 CVE-2012-10010 A vulnerability was found in BestWebSoft Contact Form 3.21. It has been classified as problematic. This affects the function cntctfrm_settings_page of the file contact_form.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.22 is able to address this issue. The identifier of the patch is 8398d96ff0fe45ec9267d7259961c2ef89ed8005. It is recommended to upgrade the affected component. The identifier VDB-225321 was... Contact_form 8.8
2023-04-05 CVE-2013-10022 A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this issue is the function cntctfrm_display_form/cntctfrm_check_form of the file contact_form.php. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 3.52 is able to address this issue. The patch is identified as 642ef1dc1751ab6642ce981fe126325bb574f898. It is recommended to upgrade the affected... Contact_form 6.1
2023-04-09 CVE-2014-125095 A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the function bws_add_menu_render of the file bws_menu/bws_menu.php. The manipulation of the argument bwsmn_form_email leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.3.7 is able to address this issue. The name of the patch is 4d531f74b4a801c805dc80360d4ea1312e9a278f. It is recommended to upgrade the affected... Contact_form 6.1
2022-06-16 CVE-2017-20055 A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0.2 is able to address this issue. It is recommended to upgrade the affected component. Contact_form 5.4
2019-08-22 CVE-2013-7481 The contact-form-plugin plugin before 3.3.5 for WordPress has XSS. Contact_form 6.1
2019-08-13 CVE-2017-18491 The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues. Contact_form 6.1
2019-08-13 CVE-2016-10869 The contact-form-plugin plugin before 4.0.2 for WordPress has XSS. Contact_form 6.1
2019-08-13 CVE-2015-9295 The contact-form-plugin plugin before 3.96 for WordPress has XSS. Contact_form 6.1
2019-08-13 CVE-2013-7475 The contact-form-plugin plugin before 3.52 for WordPress has XSS. Contact_form 6.1
2017-05-22 CVE-2017-2171 Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to version 1.3.2, Custom Search prior to version 1.36, Donate prior to version 2.1.1, Email Queue prior to version 1.1.2, Error Log Viewer prior to version 1.0.6, Facebook Button prior to version... Captcha, Car_rental, Contact_form, Contact_form_multi, Contact_form_to_db, Custom_admin_page, Custom_fields_search, Custom_search, Donate, Email_queue, Error_log_viewer, Facebook_button, Featured_posts, Gallery, Gallery_categories, Google_\+1, Google_adsense, Google_analytics, Google_captcha_\(Recaptcha\), Google_maps, Google_shortlink, Google_sitemap, Htaccess, Job_board, Latest_posts, Limit_attempts, Linkedin, Multilanguage, Pagination, Pdf_\&_print, Pinterest, Popular_posts, Portfolio, Post_to_csv, Profile_extra, Promobar, Quotes_and_tips, Re\-Attacher, Realty, Relevant_\-_related_posts, Sender, Smtp, Social_buttons_pack, Subscriber, Testimonials, Timesheet, Twitter_button, Updater, User_role, Visitors_online, Zendesk_help_center 6.1