Back to CVE Browser

CVE-2014-7240

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.0170%

EPSS Percentile40.44th

PublishedOct 6, 2017

Last ModifiedMay 13, 2026

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a master_response action to wp-admin/admin-ajax.php.

Affected Platforms (CPE)

📦

Formget

Easy Contact Form Solution

<= 1.6

References & Advisories

🔗 https://g0blin.co.uk/cve-2014-7240/

🔗 https://wpvulndb.com/vulnerabilities/8234

🔗 https://g0blin.co.uk/cve-2014-7240/

🔗 https://wpvulndb.com/vulnerabilities/8234

Related Vulnerabilities

CVE-2014-052510.0

The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unm...

CVE-2014-052810.0

Double free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attac...

CVE-2014-052410.0

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code...

CVE-2014-052610.0

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code...