description: Reflected cross-site scripting vulnerability in the checkbox of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
problem types: Cross-site scripting
affected:
{
product: php_mailform
vendor: econosys system
versions:
status: affected, version: versions prior to Version 1.40
}