Headline
CVE-2020-9364: Creative Contact Form, by Creative Solutions - Joomla Extension Directory
An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploaded attachments via the creativecontactform_upload parameter. An attacker could exploit this vulnerability with the “Send me a copy” option to receive any files of the filesystem via email.
Main Features
✔ Insert forms anywhere in content
✔ All texts are fully customizable
✔ Flexible field types - name, email, phone, address, url, number, textarea, select, multiple select, checkbox, radio
✔ Completely new checkbox, radio selection effect, implemented special for this extension
✔ Load countries list (239 countries)
✔ Flexible and user friendly interface for inputting checkbox,radio/select options
✔ Set pre-checked/selected options for checkbox,radio/select types
✔ Multiple email recipients, BCC, custom reply to email, from email
✔ Automatically fill in User name and email if logged in
✔ Allows page redirect to URL or menu item after sending email
✔ Set all fields as required or not
✔ Ajax based - no page reload
✔ High level Spam protection
✔ Custom email subject
✔ Shake effect if field is not valid
✔ Very easy to install and configure
Creative Contact Form is structured for creating:
- Contact Forms
- Application Forms
- Reservation Forms
- Survey Forms
- Contact Data Pages
- and much more.
You will get ready-to-use form just after installation!
✉ SUPPORT: If you think you found a bug or have any problem or question concerning this extension, do not hesitate to contact us via [email protected]
REQUIREMENTS: This extension requires Joomla 3.X or higher.
FREQUENTLY ASKED QUESTIONS
1. How can I install Creative Contact Form?
Sign in to Joomla! administrative panel as a Super User, then go to Extensions > Extension Manager page. Press Choose file (Browse) button and select the .zip folder of Creative Contact Form. Click Upload and Install.
2. How can I activate Creative Contact Form plugin?
Navigate to Extensions > Plug-in Manager page, and search for Creative Contact Form. Enable System - Creative Contact Form plugin, and you will be able to load forms with a shortcode in articles and custom modules.
3. How can I publish the created forms as a menu item?
Create a new menu item in your menu first. Then, select the type of your menu item to Creative Contact Form.
You will see a field for selecting a form, with the list of active forms titles. Just select desired form there.
4. How can I display my form in a module position?
Navigate to Extensions > Module Manager page, then search for Creative Contact Form Module. Edit it, and set Module Assignment and Position.
Make sure to set status to Published. There is a field Select Creative Form, with list of acive forms. Just select desired form there.
5. Can the form be inserted into a Joomla! article?
Firstly, please enable System - Creative Contact Form plugin from Extensions > Plug-in Manager page. Afterwards, navigate to Components > Creative Contact Form > Forms page from the top menu of your Joomla! administrative panel.
Select the shortcode of the form you want to publish . Copy the code and paste it into your article.
7. Can I send the submitted information of a form to multiple email addresses?
Go to Components->Creative Contact Form->Forms->Your Form->Email Options, where you will find Email To field. It lets you write multiple email addresses as recipients. Make sure to separate them with comma.
Also, CC and BCC options will let you select extra recipients.
Keywords: Contact Form Builder, Contact Us, Contact Form Generator, Contact Form Maker, Custom Forms, Feedback Form, Survey, Event Registration, Hotel Reservation, Joomla Forms, Joomla Form, Joomla Form Builder, Joomla AJAX Forms, AJAX Form, AJAX Contact Form, Joomla Form Maker, joomla contact form, contact forms joomla, joomla contact form module, joomla contact module forms, Joomla Form Creator, responsive contact forms joomla, contact forms, joomla contact forms free, contact form for joomla, joomla contact component, contact forms plugin, contact form, contact forms, responsive contact forms, joomla contact us form, joomla contact us, free joomla contact forms, joomla contact form extension, joomla extensions forms, joomla forms free, forms for joomla, Creative Forms, Creative Themes, Template Creator Wizard, Template Customization, CS Forms, CS Builder, CS Vision LAB
➤ IMPORTANT: Please do NOT use reviews to submit bug reports, feature requests, and suggestions. For such stuff use the support forum instead.
Functionality
Simple, yet powerful and secure, does not get any better. Used many other forms before we chose this for our business website.
Ease of use
Extremely easy to use and install and with all the features that are needed for a contact form.
Support
Excellent support, quick response time and prompt resolutions. Developer always responds in less than 24 hours.
Documentation
Excellent built in documentation although the application is very intuitive and very rarely do you have to check documentation
I used this to: Business website contact form that we place on almost all pages for ease of contact
Functionality
Niet teveel niet te weinig en daardoor overzichtelijk. Meer is er niet nodig.
Ease of use
Zelfs een leek kan hiermee overweg het is helder en duidelijk en laat niets te wensen over.
Support
Ik heb, door mijn provider, ook support nodig gehad maar dat ging uiterst vriendelijk, snel en oplossingsgericht.
Documentation
Summier maar daardoor ook niet teveel onzin.Ik geef toe dat ik de handleiding niet geheel gelezen heb.
I used this to: mijn zakelijke website ter vervanging van Flexicontact dat ineens niet meer wilde werken.
Functionality
The extension comes with just about any type of form type you might need with prebuilt templates. Saved me a great deal of time!
Ease of use
It has awesome drag and drop features and access to CSS and SCRIPTING code from the form control panel. Practical for novice or developer.
Support
I asked for some advice on customization and had a response within minutes. Unlike many extensions, this support team knows their product!
Documentation
I see that it is extensive but I did not need to use it, the layout of the form builder is so intuitive.
I used this to: I use this for Contact Forms, a reservation system and a support submission tool. I am moving about a dozen of my current web sites to this extension.
Functionality
Did exactly what it said on the tin, creates a professional looking contact form on your website.
Ease of use
Easy to setup, my fault for not choosing the correct version at the outset, had to upgrade to get the complex forms element with maps.
Support
Had an issue with the component stripping out text that I put into fields, this was quickly resolved without fuss by Simon. Great support.
Documentation
I used this to: the contact page on my website, add a professional level to the page, over and above what can be achieved with Joomla itself.
Functionality
Doet precies (en misschien nog wel meer) wat het moet doen. Een top formulier
Ease of use
Super simpel en eenvoudig. Installeren ging super snel en ook het opzetten van een formulier kostte weinig energie.
Support
Top service, super snelle reactie en oplossing! Zelfs in het weekend gaan ze gewoon door.
Documentation
Lekker duidelijk en helder omschreven, op deze manier kan het niet mis gaan.
I used this to: Een klachten formulier voor een website over opleidingen voor "eerste hulp bij ongelukken".
Functionality
Der Umfang ist gigantisch. Ob ein einfaches Email-Formular an einen Kollegen oder an mehrere Kollegen, kein Problem mit CCF.
Ease of use
Es ist alles leicht verständlich und einfach einzurichten. Wenn man im Englischen keine Probleme hat.
Support
Schnell und hilfsbereit. Man erhält binnen eines Tages eine Antwort. Sicher auf englisch aber dies sollte für kein Problem sein.
Documentation
Sehr ausführlich und leicht verständlich. Wenn man doch mal Fragen hat, hilft der Support sehr zügig.
I used this to: Wir nutzten es für die Homepage einer Schule, um Krankmeldungen und Kontakte zu bestimmten Bereichen herzustellen.
Functionality
Funciona muy bien el componente y es relativamente fácil de manejar.
Ease of use
Es fácil de usar y relativamente intuitivo, creo que podrían incluirle unos botones para quitar la sombra por default que tienen los textos
Support
El soporte es muy bueno y rápido, me contestó Simon muy rápido y resolvió el requerimiento
Documentation
La documentación es buena, pero si les faltan videos y tutoriales que muestren ejemplos de cómo se usa el componente.
I used this to: Uso este componente para mis páginas de Joomla, lo estoy empezando a usar y al parecer todo va bien.
Functionality
This is by far, the MOST USEFUL, POWERFUL Contact form component on this joomla org site. MORE FUNCTIONS than you would expect. A MUST HAVE!
Ease of use
PEACE OF MIND! Very easy to use. packed with IMPORTANT features and functions. Never complicated , many ready to use forms, easy to edit
Support
HONEST and VERY PROMPT SUPPORT. Reliable, and helpful if you ask for help. 95% chance you wont need support because CCF is straightforward!
Documentation
More than well documented. Tool tips, and descriptions on each option, functions makes it very easy to understand and use. Well EXPLAINED!
I used this to: For my website contact form, product inquiry forms, popup contact us, call me back form, job application form, file upload form… too many to list… since joomla 2.5 over 7yrs and still loving it. I call this CCF component the JACK of ALL PURPOSE FORM creation. NO COMPETTION!
Owner’s reply: Hi,
Thanks for suck a beautiful review!
We work hard to keep our clients satisfied.
Joomla!4 version is also ready, you can make update.
Thanks,
Regards, Simon
Functionality
The extension offers loads of functions and comes with dozens of pre-installed templates and demo-forms.
Ease of use
Setup is straight forward and very easy. You can start from a demo-form or build one from scratch within a few minutes.
Support
The developer responded to my email within one day and immediately provided the correct solution to fix my issue!
Documentation
The documentation is absolutely sufficient and covers everything you might need in order to create any form for your purposes.
I used this to: Ordering coupons and requesting prices and room availabilities on a hotel website.
Functionality
Extension qui fonctionnait bien jusqu’à octobre 2020 mais qui n’a apparemment pas supporté les évolutions successives de Joomla!
Ease of use
Cette extension n’est pas très compliquée à utiliser. Une documentation est accessible sur le site du créateur.
Support
Support inexistant depuis plusieurs mois. Aucune réponse aux mails et en plus la page dédiée du forum est polluée par des spammeurs.
Documentation
Documentation correcte même si elle pourrait être largement améliorée.
I used this to: J’utilisai cette extension (version Business) comme formulaire de contact pour un site dédié à la Magie pour les demandes d’adhésion ou de prestation. Depuis octobre 2020, cette extension ne fonctionne plus et pas de réponse du créateur à mes emails.
Owner’s reply: Hi,
I was at hospital for some time, so the extensions has not be supported for some time.
I’m really sorry about that.
Now I come back, and can give full support.
Thanks.