cross-site scripting fix? | ww.wp.xz.cn

Resolved palalisimo
(@palalisimo)

10 years, 8 months ago

It has come to my attention that this plug in is vulnerable to cross-site scripting.

Does anyone has a fix? How bad is that my site is vulnerable to this kind of attack?

https://ww.wp.xz.cn/plugins/contact-form-7/

Viewing 3 replies - 1 through 3 (of 3 total)

Neil Murray
(@buzztone)

10 years, 8 months ago

Where did this come to your attention?

I haven’t seen any credible reports that this plugin is subject to cross-site scripting attacks.

Thread Starter palalisimo
(@palalisimo)

10 years, 8 months ago

What kind of proof could I send without revealing my site?
i have a form in my website, and one of the submissions shows like this:

https://dl.dropboxusercontent.com/u/6201898/capture11.jpg

Plugin Author Takayuki Miyoshi
(@takayukister)

10 years, 8 months ago

I got more detailed information from this person privately and confirmed there is no security issue.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘cross-site scripting fix?’ is closed to new replies.

3 replies
3 participants
Last reply from: Takayuki Miyoshi
Last activity: 10 years, 8 months ago
Status: resolved