Tech-Banker Contact Bank 2.0.3 for WordPress

CPE Details

Tech-Banker Contact Bank 2.0.3 for WordPress
tech-banker
contact_bank
2.0.3
2024-02-16
18h10 +00:00
2024-02-16
18h10 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:tech-banker:contact_bank:2.0.3:*:*:*:*:wordpress:*:*

Informations

Vendor

tech-banker

Product

contact_bank

Version

2.0.3

Target Software

wordpress

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-3350 2022-10-24 22h00 +00:00 The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
4.8
Moyen
CVE-2014-3841 2014-05-22 15h00 +00:00 Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form layout configuration. NOTE: some of these details are obtained from third party information.
4.3