CVE-2014-125095 — LOW (3.5)

Vulnerability Description

A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the function bws_add_menu_render of the file bws_menu/bws_menu.php. The manipulation of the argument bwsmn_form_email leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.3.7 is able to address this issue. The name of the patch is 4d531f74b4a801c805dc80360d4ea1312e9a278f. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-225320.

CVSS Score

3.5

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Bestwebsoft	Contact Form	1.3.4

Related Weaknesses (CWE)

CWE-79

References

https://github.com/wp-plugins/contact-form-plugin/commit/4d531f74b4a801c805dc803Patch
https://vuldb.com/?ctiid.225320Permissions RequiredThird Party Advisory
https://vuldb.com/?id.225320Third Party Advisory
https://github.com/wp-plugins/contact-form-plugin/commit/4d531f74b4a801c805dc803Patch
https://vuldb.com/?ctiid.225320Permissions RequiredThird Party Advisory
https://vuldb.com/?id.225320Third Party Advisory

FAQ

What is CVE-2014-125095?

CVE-2014-125095 is a vulnerability with a CVSS score of 3.5 (LOW). A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the function bws_add_menu_render of the file bws_menu/bws_menu....

How severe is CVE-2014-125095?

CVE-2014-125095 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-125095?

Check the references section above for vendor advisories and patch information. Affected products include: Bestwebsoft Contact Form.