# Title: Cross-Site Request Forgery, Cross-Site Scripting and SQL Injection in CP Contact Form with Paypal Wordpress Plugin v1.1.5 # Submitter: Nitin Venkatesh # Product: CP Contact Form with Paypal Wordpress Plugin # Product URL: https://wordpress.org/plugins/cp-contact-form-with-paypal/ # Vulnerability Type: Cross-site Request Forgery [CWE-352], Cross-site scripting[CWE-79], Improper Neutralization of Special Elements...
↧