PT-2023-10011 · Bestwebsoft · Bestwebsoft Contact Form Plugin

CVE-2013-10022 · Publicado 2023-04-05 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BestWebSoft Contact Form Plugin version 3.51

Description A vulnerability has been found in the BestWebSoft Contact Form Plugin, affecting the function cntctfrm display form/cntctfrm check form of the file contact form.php. This issue leads to cross-site scripting and can be launched remotely.

Recommendations For BestWebSoft Contact Form Plugin version 3.51, upgrade to version 3.52 to address this issue. As a temporary workaround, consider disabling the cntctfrm display form/cntctfrm check form function until the patch is applied. Restrict access to the contact form.php file to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-10022

Produtos afetados

Bestwebsoft Contact Form Plugin

Referências · 7

• https://t.me/cvenotify/47592 · Publicação no Telegram
• https://github.com/wp-plugins/contact-form-plugin/commit/642ef1dc1751ab6642ce981fe126325bb574f898 · Correção
• https://vuldb.com/?ctiid.225002 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-10022 · Nota de Segurança
• https://t.me/cibsecurity/61453 · Publicação no Telegram
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-10022 · Nota
• https://vuldb.com/?id.225002 · Nota