← Back

Formget

formget

3 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Easy Contact Form Solution
easy_contact_form_solution
1 CVE
Contact Form Integrated With Google Maps
contact_form_integrated_with_google_maps
1 CVE
Contact Form By Formget
contact_form_by_formget
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-5125
1Formget
1Contact Form By Formget
Jun 17, 2026
Sep 23, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Contact Form by FormGet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formget' shortcode in versions up to, and including, 5.5.5 due to insufficient input sanitization and output escaping on...Show more
The Contact Form by FormGet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formget' shortcode in versions up to, and including, 5.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less
CVE-2014-7238
1Formget
1Contact Form Integrated With Google Maps
Nov 21, 2024
Jan 23, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS
CVE-2014-7240
1Formget
1Easy Contact Form Solution
May 13, 2026
Oct 6, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a master_response actio...Show more
Cross-site scripting (XSS) vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a master_response action to wp-admin/admin-ajax.php.Show less