Vulnerabilities > Codepeople > CP Contact Form With Paypal > 1.2.73

DATE CVE VULNERABILITY TITLE RISK
2024-06-03 CVE-2023-27460 Unspecified vulnerability in Codepeople CP Contact Form With Paypal
Missing Authorization vulnerability in CodePeople, paypaldev CP Contact Form with Paypal allows Functionality Misuse.This issue affects CP Contact Form with Paypal: from n/a through 1.3.34.
network
low complexity
codepeople
8.8
2019-08-15 CVE-2019-14784 Cross-site Scripting vulnerability in Codepeople CP Contact Form With Paypal
The "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition.
network
low complexity
codepeople CWE-79
6.1
2019-08-09 CVE-2019-14785 Cross-site Scripting vulnerability in Codepeople CP Contact Form With Paypal
The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cp_contact_form_paypal.php&pwizard=1 cp_contactformpp_id parameter.
network
low complexity
codepeople CWE-79
5.4