Request a Quote – Quote Forms for Any WordPress Site vulnerabilities
1 known vulnerability in Request a Quote – Quote Forms for Any WordPress Site from eMarket Design. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
Request a Quote – Quote Forms for Any…: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The Request a Quote plugin for WordPress is vulnerable to Code Injection in versions up to, and including, 2.5.5 via the emd_delete_file AJAX action. This is due to the emd_delete_file() handler deriving a PHP function name from the attacker-controlled $_POST[