CVE-2024-29130 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

2024-03-1913:55:18

CWE-79

Patchstack

raw.githubusercontent.com

wordpress

contact form 7

paypal & stripe add-on

reflected cross-site scripting

cve-2024-29130

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.4%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through 2.0.