Contact Bank

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-3350 Oct 25, 17:15 MEDIUM POC This Month

The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Contact Bank Tech Banker

NVD WPScan

CVSS 3.1

4.8

EPSS

0.5%

CVE-2014-3841 May 22, 15:13 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

WordPress XSS Wordpress Plugin Contact Bank Tech Banker

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2022-3350

EPSS 0% CVSS 4.8

MEDIUM POC This Month

WordPress XSS Contact Bank +1

NVD WPScan

CVE-2014-3841

EPSS 0% CVSS 4.3

MEDIUM This Month

WordPress XSS Wordpress Plugin +2

NVD