CVE-2017-20054 in Contact Form Manager Plugin

Summary

by MITRE • 06/16/2022

A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsible: VulDB
• Disclosure: 06/16/2022
• Moderation: accepted
• Entry: VDB-97388
• CPE: ready
• CWE: CWE-80 (confirmed)
• Exploit: Download
• CVSS: 3.5 (VulDB)
• EPSS: 0.00794
• KEV: no
• Activities: very low
• Sector: Hostingprovider

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-20054
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-20054
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-20054/