CVE-2014-6445 | BDVDB-2026-64324 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) uE or (2) uC parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://research.g0blin.co.uk/cve-2014-6445/
https://wordpress.org/plugins/contact-form-7-integrations/changelog/

Exploit#

No public exploit known

History#

Version 12014-09-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.