Security Advisory

CVE-2022-0248

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-14 14:41:25

Last updated 2024-08-02 23:18:42

Assigner WPScan

State PUBLISHED

Description

The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result, unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the malicious submission

← Browse all CVEs View on cve.org ↗