CVE-2015-9539

Description

The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fs_contact_form1[welcome] XSS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/cybersecurityworks/Disclosed/issues/4 ↗
• https://www.openwall.com/lists/oss-security/2015/10/27/2 ↗
• https://github.com/amansaini/fast-secure-contact-form ↗
• https://cybersecurityworks.com/zerodays/cve-2015-9539-fastsecure.html ↗