CVE-2022-0148 All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)

2022-02-0715:47:25

CWE-79

WPScan

www.cve.org

xss; wordpress plugin; all-in-one floating contact form

EPSS

0.001

Percentile

50.4%

JSON

The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin before 2.0.4 was vulnerable to reflected XSS on the my-sticky-elements-leads admin page.

CNA Affected

[
  {
    "product": "All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs  – My Sticky Elements",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.0.4",
        "status": "affected",
        "version": "2.0.4",
        "versionType": "custom"
      }
    ]
  }
]