CVE-2017-18492

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 13, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-184936.1The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.CVE-2017-184946.1The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.CVE-2017-184956.1The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.CVE-2017-184966.1The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.CVE-2017-184976.1The liveforms plugin before 3.4.0 for WordPress has XSS.CVE-2017-184986.1The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.CVE-2017-184996.1The simple-membership plugin before 3.5.7 for WordPress has XSS.CVE-2017-185006.1The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.CVE-2017-185016.1The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.CVE-2017-185026.1The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.CVE-2017-185036.1The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS.CVE-2017-185048.8The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF.
CVE-2017-18492: Medium severity, CVSS 6.1 | Vulnix