Description

WordPress Plugin GorillaForms-Custom Contact Forms is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin GorillaForms-Custom Contact Forms version 2.0.3 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 2.1 or latest

References

https://wordpress.org/plugins/custom-user-contact-form-builder/changelog/

Related Vulnerabilities

Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-3744)

Magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-7859)

Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-6660)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-22911)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-29907)

Severity

High

Tags

Missing Update