CVE-2014-3841

Published: May 22, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form layout configuration. NOTE: some of these details are obtained from third party information.

Affected (20)

Products: Tech Banker: Contact Bank

Tech Banker

1 product

Contact Bank

Configuration A

20 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tech Banker Contact Bank	Up to 2.0.19
Tech Banker Contact Bank	Version 2.0.0
Tech Banker Contact Bank	Version 2.0.10
Tech Banker Contact Bank	Version 2.0.11
Tech Banker Contact Bank	Version 2.0.12
Tech Banker Contact Bank	Version 2.0.13
Tech Banker Contact Bank	Version 2.0.14
Tech Banker Contact Bank	Version 2.0.15
Tech Banker Contact Bank	Version 2.0.16
Tech Banker Contact Bank	Version 2.0.17
Tech Banker Contact Bank	Version 2.0.18
Tech Banker Contact Bank	Version 2.0.1
Tech Banker Contact Bank	Version 2.0.2
Tech Banker Contact Bank	Version 2.0.3
Tech Banker Contact Bank	Version 2.0.4
Tech Banker Contact Bank	Version 2.0.5
Tech Banker Contact Bank	Version 2.0.6
Tech Banker Contact Bank	Version 2.0.7
Tech Banker Contact Bank	Version 2.0.8
Tech Banker Contact Bank	Version 2.0.9