Kleor Contact Manager vulnerabilities
- kleor contact managerContact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass9.8 Critical
- kleor contact managerWordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kleor contact managerWordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability8.8 High
- kleor contact managerContact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title'4.4 Medium
- kleor contact managerContact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload8.1 High