← All credits

Thanks to Ibram Marzouk for reporting this vulnerability.

2 vulnerability records and advisories credit this contributor.

CVE-2016-9493
PHP forms generated using the PHP FormMail Generator are vulnerable to stored cross-site scripting
CVE-2016-9492
PHP forms generated using the PHP FormMail Generator are vulnerable to unrestricted upload of dangerous file types