Beveiligingsadvies

CVE-2026-14870

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-28 06:00:02

Laatst bijgewerkt 2026-07-28 13:19:17

Toegewezen door WPScan

CVSS-score 7.1

Status PUBLISHED

Beschrijving

The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before reflecting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

← Alle CVE's bekijken Bekijk op cve.org ↗