CVE-2023-37988
published 2023-08-10CVE-2023-37988: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Creative Solutions Contact Form Generator plugin <= 2.5.5 versions.
PriorityP335medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
1.23%
65.2th percentile
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Creative Solutions Contact Form Generator plugin <= 2.5.5 versions.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| creative-solutions | contact_form_generator | <= 2.5.5 | — |
| creative_solutions | contact_form_generator | n/a – 2.5.5 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
Contact Form Generator <= 2.5.5 - Cross-Site Scripting
nuclei·CVSS 6.1
CVE-2023-37988 [MEDIUM] Contact Form Generator <= 2.5.5 - Cross-Site Scripting
Contact Form Generator alert(document.domain)"
- "contact_form_generator"
condition: and
- type: word
part: content_type_2
words:
- "text/html"
- type: status
status:
- 200
# digest: 490a00463044022053f7d9fb181ba9199d7c08f3d76607fa5e4517d070a4963cee3007207467703c0220357b045c4d333e6f8f85283fc26c1414d65bb5786ac7428158b16d930e432f93:922c64590222798bb761d5b6d8e72950
No writeups or analysis indexed.
http://packetstormsecurity.com/files/174896/WordPress-Contact-Form-Generator-2.5.5-Cross-Site-Scripting.htmlhttps://patchstack.com/database/vulnerability/contact-form-generator/wordpress-contact-form-generator-plugin-2-5-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cvehttp://packetstormsecurity.com/files/174896/WordPress-Contact-Form-Generator-2.5.5-Cross-Site-Scripting.htmlhttps://patchstack.com/database/vulnerability/contact-form-generator/wordpress-contact-form-generator-plugin-2-5-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
2023-08-10
Published