CVE-2014-7240

Cross-site scripting (XSS) vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a master_response action to wp-admin/admin-ajax.php.

• CWE-79

• https://g0blin.co.uk/cve-2014-7240/Exploit, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/8234Third Party Advisory
• https://g0blin.co.uk/cve-2014-7240/Exploit, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/8234Third Party Advisory

Published

Oct 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-7233GE Healthcare Precision THUNIS-800+ has a default password o…
• CVE-2014-7234Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7235htdocs_ari/includes/login.php in the ARI Framework module/As…
• CVE-2014-7236Eval injection vulnerability in lib/TWiki/Plugins.pm in TWik…9.1
• CVE-2014-7237lib/TWiki/Sandbox.pm in TWiki 6.0.0 and earlier, when runnin…
• CVE-2014-7238The WordPress plugin Contact Form Integrated With Google Map…6.1
• CVE-2014-7241The TSUTAYA application 5.3 and earlier for Android allows r…
• CVE-2014-7242The SumaHo application 3.0.0 and earlier for Android and the…
• CVE-2014-7243LG Electronics Mobile WiFi router L-09C, L-03E, and L-04D do…
• CVE-2014-7244Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7245Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7246The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 throug…