Bestwebsoft Contact Form vulnerabilities

CVE-2024-2200 [MEDIUM] CWE-79 CVE-2024-2200: The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_subject’ parameter in all versions up to, and including, 4.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execu

CVE-2012-10010 [HIGH] CWE-352 CVE-2012-10010: A vulnerability was found in BestWebSoft Contact Form 3.21. It has been classified as problematic. T A vulnerability was found in BestWebSoft Contact Form 3.21. It has been classified as problematic. This affects the function cntctfrm_settings_page of the file contact_form.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.22 is able to address this issue. The identifier o

CVE-2014-125095 [MEDIUM] CWE-79 CVE-2014-125095: A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as pr A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the function bws_add_menu_render of the file bws_menu/bws_menu.php. The manipulation of the argument bwsmn_form_email leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.3.7

CVE-2013-10022 [MEDIUM] CWE-79 CVE-2013-10022: A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plu A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this issue is the function cntctfrm_display_form/cntctfrm_check_form of the file contact_form.php. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 3.52 is able

CVE-2017-20055 [MEDIUM] CWE-80 CVE-2017-20055: A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. T A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0.2 is able to address this

CVE-2013-7481 [MEDIUM] CWE-79 CVE-2013-7481: The contact-form-plugin plugin before 3.3.5 for WordPress has XSS. The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.

CVE-2016-10869 [MEDIUM] CWE-79 CVE-2016-10869: The contact-form-plugin plugin before 4.0.2 for WordPress has XSS. The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.

CVE-2015-9295 [MEDIUM] CWE-79 CVE-2015-9295: The contact-form-plugin plugin before 3.96 for WordPress has XSS. The contact-form-plugin plugin before 3.96 for WordPress has XSS.

CVE-2013-7475 [MEDIUM] CWE-79 CVE-2013-7475: The contact-form-plugin plugin before 3.52 for WordPress has XSS. The contact-form-plugin plugin before 3.52 for WordPress has XSS.

CVE-2017-18491 [MEDIUM] CWE-79 CVE-2017-18491: The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues. The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.

CVE-2017-2171 [MEDIUM] CWE-79 CVE-2017-2171: Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1. Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to version 1.3.2, Custom Search prior to version 1.36, Do