VYPR

Creative Contact Form

by Joomla

CVEs (1)

  • CVE-2020-9364MedMar 4, 2020
    risk 0.35cvss 5.3epss 0.03

    An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploaded attachments via the creativecontactform_upload parameter. An attacker could…