medium4.3
CVE-2014-6445
Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) uE or (2) uC parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Contactus | Contact Form 7 Integrations | Versions 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5 |