CVE-2017-20053
XYZScripts Contact Form Manager Plugin cross-site request forgery
MEDIUM 4.3EPSS 0.6%
A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
- Affected
- XYZScripts · Contact Form Manager Plugin
- CVSS v3.1 NVD
- 4.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 0.58% chance of exploitation in the next 30 days, 47th percentile
- Published
- 2022-06-16
- Updated
- 2025-04-15