Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Geoff Davies Subscribe
Filtered by product Contact Forms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-2071 2 Drupal, Geoff Davies 2 Drupal, Contact Forms 2017-08-28 2.1 LOW N/A
Cross-site scripting (XSS) vulnerability in the Contact Forms module 6.x-1.x before 6.x-1.13 for Drupal when the core contact form is enabled, allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-2340 2 Drupal, Geoff Davies 2 Drupal, Contact Forms 2012-06-27 3.5 LOW N/A
The Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently restrictive permissions, which allows remote authenticated users with the "access the site-wide contact form" permission to modify the module settings via unspecified vectors.