CVE-2022-22142

2022-02-0810:30:39

jpcert

www.cve.org

0.001 Low

EPSS

Percentile

35.6%

JSON

Reflected cross-site scripting vulnerability in the checkbox of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.

CNA Affected

[
  {
    "product": "php_mailform",
    "vendor": "econosys system",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to Version 1.40"
      }
    ]
  }
]

References

github.com/econosys-system/php_mailform

jvn.jp/en/jp/JVN16690037/index.html

0.001 Low

EPSS

Percentile

35.6%

JSON

Related for CVELIST:CVE-2022-22142