Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Contact Form by BestWebSoft Email Header Injection - Vulnerability Database
WP Plugin Contact Form Plugin

WordPress Plugin Contact Form by BestWebSoft Email Header Injection

Critical
Reference: No Reference
Title: WordPress Plugin Contact Form by BestWebSoft Email Header Injection
Overview:

WordPress Plugin Contact Form by BestWebSoft is prone to an email header injection vulnerability because it fails to sufficiently sanitize input. Exploiting this issue may allow a remote attacker to insert arbitrary email headers into an HTTP response which may aid in launching further attacks. WordPress Plugin Contact Form by BestWebSoft version 3.83 is vulnerable other versions may also be affected.