Test ID:	1.3.6.1.4.1.25623.1.0.113660
Category:	Web application abuses
Title:	WordPress WPForms Contact Form Plugin < 1.5.9 XSS Vulnerability
Summary:	The WordPress plugin 'WPForms Contact Form' is prone to; a cross-site scripting (XSS) vulnerability.
Description:	Summary: The WordPress plugin 'WPForms Contact Form' is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Impact: Successful exploitation would allow an authenticated attacker to inject arbitrary HTML and JavaScript into the site. Affected Software/OS: WordPress WPForms Contact Form plugin through version 1.5.8.2. Solution: Update to version 1.5.9 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-10385 https://packetstormsecurity.com/files/156910/WordPress-WP-Forms-1.5.8.2-Cross-Site-Scripting.html https://wordpress.org/plugins/wpforms-lite/#developers https://wpvulndb.com/vulnerabilities/10114 https://www.getastra.com/blog/911/plugin-exploit/stored-xss-vulnerability-found-in-wpforms-plugin/ https://www.jinsonvarghese.com/stored-xss-vulnerability-found-in-wpforms-plugin/
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.