Required CVE Record Information
Description
Reflected cross-site scripting vulnerability in the attached file name of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- https://github.com/econosys-system/php_mailform x_transferred
- https://jvn.jp/en/jp/JVN16690037/index.html x_transferred