Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Constantcontact Subscribe
Filtered by product Constant Contact Forms
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24134 1 Constantcontact 1 Constant Contact Forms 2021-03-24 3.5 LOW 4.8 MEDIUM
Unvalidated input and lack of output encoding in the Constant Contact Forms WordPress plugin, versions before 1.8.8, lead to multiple Stored Cross-Site Scripting vulnerabilities, which allowed high-privileged user (Editor+) to inject arbitrary JavaScript code or HTML in posts where the malicious form is embed.