oss-security - CVE Request - CSRF and XSS in Encrypted Contact Form Wordpress Plugin v1.0.4

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAARZ5vq4ZZggrPR8XK-HyFdCwaiyUa5nEk07fJ9iGN_3+ikKEg@mail.gmail.com>
Date: Sat, 16 May 2015 02:11:04 +0000
From: Nitin Venkatesh <venkatesh.nitin@...il.com>
To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Subject: CVE Request - CSRF and XSS in Encrypted Contact Form Wordpress Plugin v1.0.4

Hi,

I discovered CSRF and XSS vulnerabilities in the Encrypted Contact Form
Wordpress Plugin v1.0.4 which was responsibly disclosed and patched by the
vendor in v1.1.

I request a CVE for the same.

Reference:
http://seclists.org/fulldisclosure/2015/May/63

Thanks & regards,
Nitin Venkatesh

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.