Vulnerability Details CVE-2015-9539
The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fs_contact_form1[welcome] XSS.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.3%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- https://cybersecurityworks.com/zerodays/cve-2015-9539-fastsecure.html
- https://github.com/amansaini/fast-secure-contact-form
- https://github.com/cybersecurityworks/Disclosed/issues/4
- https://www.openwall.com/lists/oss-security/2015/10/27/2
- https://cybersecurityworks.com/zerodays/cve-2015-9539-fastsecure.html
- https://github.com/amansaini/fast-secure-contact-form
- https://github.com/cybersecurityworks/Disclosed/issues/4
- https://www.openwall.com/lists/oss-security/2015/10/27/2
Products affected by CVE-2015-9539
-
cpe:2.3:a:fast_secure_contact_form_project:fast_secure_contact_form:-
-
cpe:2.3:a:fast_secure_contact_form_project:fast_secure_contact_form:3.1.9.2
-
cpe:2.3:a:fast_secure_contact_form_project:fast_secure_contact_form:4.0.16
-
cpe:2.3:a:fast_secure_contact_form_project:fast_secure_contact_form:4.0.17
-
cpe:2.3:a:fast_secure_contact_form_project:fast_secure_contact_form:4.0.22
-
cpe:2.3:a:fast_secure_contact_form_project:fast_secure_contact_form:4.0.25
-
cpe:2.3:a:fast_secure_contact_form_project:fast_secure_contact_form:4.0.26
-
cpe:2.3:a:fast_secure_contact_form_project:fast_secure_contact_form:4.0.27
-
cpe:2.3:a:fast_secure_contact_form_project:fast_secure_contact_form:4.0.28