Your Drupal site contains a contact form for anonymous users, with the following fields: subject (text plain), name (text plain), email (Email), message (text long), attachment (file)
All fields are without any restrictions and none is mandatory to send the form
What is the potential security threat with this form1?
Currently there are no comments in this discussion, be the first to comment!