{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form layout configuration. NOTE: some of these details are obtained from third party information."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-10-03T16:20:23", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://wordpress.org/plugins/contact-bank/changelog"}, {"name": "67334", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/67334"}, {"name": "58300", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/58300"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-3841", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form layout configuration. NOTE: some of these details are obtained from third party information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://wordpress.org/plugins/contact-bank/changelog", "refsource": "MISC", "url": "http://wordpress.org/plugins/contact-bank/changelog"}, {"name": "67334", "refsource": "BID", "url": "http://www.securityfocus.com/bid/67334"}, {"name": "58300", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/58300"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2014-3841", "datePublished": "2022-10-03T16:20:23", "dateReserved": "2022-10-03T00:00:00", "dateUpdated": "2022-10-03T16:20:23", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tech-banker:contact_bank:*:*:*:*:*:*:*:*", "matchCriteriaId": "E0EAD8F7-8907-441F-96E9-D62DFD210EE2", "versionEndIncluding": "2.0.19", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "6E03D7EA-F2D6-4C69-B52A-6B927E316581", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "C10DEBB6-63D8-4E0C-A10D-BB3568E748E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "34598E41-8E76-4CF7-8046-97782A8D5E8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "D5C25EE8-3F4D-4168-B63C-7CE424CD8417", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "65AC7B60-3534-4BEC-8F50-D2D6441C3CE3", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "FE7A461C-6DA8-4C82-966F-8694357E2C60", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "765AA781-ECEC-4FB1-98D3-708A71BDAEE7", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "5DDDBF71-2D49-4BD8-9978-84D8469EC0B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "D0AA9E57-0318-44FE-A162-F5504DC15EE3", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "B791497B-C974-4EF3-B43D-DC947C217565", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "6E4FAE4C-A1B1-4E53-A2B8-5DEBC6F1C28F", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "F977776F-1264-4F4C-86FD-939933EE69BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "90DD3EFD-724B-4D34-9254-10E62ACC0696", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "9BA22E94-7887-44C9-881A-52900A050297", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "0A1198DF-A355-4B4A-A616-5539432C95C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "D9FA678B-11D8-45DA-88A0-0415CA2C8332", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.16:*:*:*:*:*:*:*", "matchCriteriaId": "E90D233F-8592-4F03-AA01-EE14AF01C67B", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "4CD4AD4E-298E-4C05-BAD5-1FC82B489793", "vulnerable": true}, {"criteria": "cpe:2.3:a:tech-banker:contact_bank:2.0.18:*:*:*:*:*:*:*", "matchCriteriaId": "A50B67FE-90DB-4C9E-909B-485C1135B750", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*", "matchCriteriaId": "A77EB0E7-7FA7-4232-97DF-7C7587D163F1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form layout configuration. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "Vulnerabilidad de XSS en el plugin Contact Bank anterior a 2.0.20 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a trav\u00e9s del campo Label, relacionado con la configuraci\u00f3n de dise\u00f1o de formularios. NOTA: algunos de estos detalles se obtienen de informaci\u00f3n de terceras partes."}], "id": "CVE-2014-3841", "lastModified": "2014-06-27T16:56:34.500", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2014-05-22T15:13:04.473", "references": [{"source": "cve@mitre.org", "url": "http://secunia.com/advisories/58300"}, {"source": "cve@mitre.org", "url": "http://wordpress.org/plugins/contact-bank/changelog"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/67334"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}