Tech-Banker Contact Bank 1.4 for WordPress

CPE Details

Tech-Banker Contact Bank 1.4 for WordPress
tech-banker
contact_bank
1.4
2024-02-16
18h10 +00:00
2024-02-16
18h10 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:tech-banker:contact_bank:1.4:*:*:*:*:wordpress:*:*

Informations

Vendor

tech-banker

Product

contact_bank

Version

1.4

Target Software

wordpress

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-3350 2022-10-24 22h00 +00:00 The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
4.8
Medium
CVE-2014-3841 2014-05-22 15h00 +00:00 Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form layout configuration. NOTE: some of these details are obtained from third party information.
4.3