WordPress Cross-Site Scripting Vulnerability (CNVD-2021-102388)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress (Wordpress) Foundation. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin Contact Form 7 Database Addon (CFDB7) 1.2.6.1 and its previous versions have a cross-site scripting vulnerability, which stems from the lack of effective filtering and escaping of user-submitted parameters by the software. No detailed vulnerability details are available at this time.