CVE-2017-20054

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-80 CWE-79

Affected software

Vendor	Product	Versions
XYZScripts	Contact Form Manager Plugin	n/a

References

http://seclists.org/fulldisclosure/2017/Feb/99Exploit, Mailing List, Third Party Advisory
https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.htmlExploit, Third Party Advisory
https://vuldb.com/?id.97388Third Party Advisory
http://seclists.org/fulldisclosure/2017/Feb/99Exploit, Mailing List, Third Party Advisory
https://sumofpwn.nl/advisory/2016/cross_site_request_forgery___cross_site_scripting_in_contact_form_manager_wordpress_plugin.htmlExploit, Third Party Advisory
https://vuldb.com/?id.97388Third Party Advisory

Timeline

Published: Jun 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-200555.4A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipul CVE-2017-200565.4A vulnerability was found in weblizar User Login Log Plugin 2.2.1. It has been classified as problematic. Affected is an unknown function. T CVE-2017-200576.1A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC. Affected is an unknown function. The manipulation of the CVE-2017-200586.1A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of CVE-2017-200595.4A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC. Affected by this issue is some unknown functi CVE-2017-200605.4A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog CVE-2017-200615.4A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic. This vulnerability affects unknown code of the file /CVE-2017-200628.8A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown processing. The manipulati CVE-2017-200638.8A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /fileman CVE-2017-200648.8A vulnerability was found in Elefant CMS 1.3.12-RC. It has been declared as critical. Affected by this vulnerability is an unknown functiona CVE-2017-200654.3A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic. This issue affects some unknown processing. The man CVE-2017-200667.8A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulati