Cross-site scripting (XSS) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin 2.8.26 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit_time parameter in the CF7DBPluginSubmissions page to wp-admin/admin.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-02-20T16:00:00

Updated: 2024-08-06T05:02:42.989Z

Reserved: 2015-02-20T00:00:00

Link: CVE-2015-2040

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-02-20T16:59:09.100

Modified: 2024-11-21T02:26:38.050

Link: CVE-2015-2040

cve-icon Redhat

No data.