Cross-Site Scripting Vulnerability in Clean and Simple Contact Form Plugin for WordPress
CVE-2014-8955

Currently unrated

Key Information:

Vendor

Wordpress
Status
Clean And Simple Contact Form
Vendor
CVE Published:
17 November 2014

What is CVE-2014-8955?

The Clean and Simple Contact Form plugin for WordPress is vulnerable to cross-site scripting (XSS), which can be exploited by remote attackers. Through manipulation of the cscf[name] parameter during form submissions, attackers may inject arbitrary web scripts or HTML, potentially compromising user data and the integrity of the website. This vulnerability targets users running version 4.4.0 and earlier, emphasizing the need for immediate updates to protect against possible malicious intrusions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/98469
vdb-entryx_refsource_XF
http://packetstormsecurity.com/files/128957/WordPress-Cle...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.