Description
In Joomla! before 3.9.11, inadequate checks in com_contact could allow mail submission in disabled forms.
Remediation
References
Related Vulnerabilities
WordPress Plugin Ninja Forms with File Uploads Extension Cross-Site Scripting (3.3.12)
WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Multiple Vulnerabilities (4.0.3)
WordPress Plugin LearnPress-WordPress LMS Cross-Site Scripting (4.1.6.5)
phpMyAdmin Improper Restriction of XML External Entity Reference Vulnerability (CVE-2011-4107)