Lucene search
Krzysztof ZającPATCHSTACK:461D841EAD8BCBD44A5E68CD683066CDHistoryJan 10, 2022 - 12:00 a.m.
WordPress All-in-one Floating Contact Form plugin <= 2.0.3 - Reflected Cross-Site Scripting (XSS) vulnerability
2022-01-1000:00:00
Krzysztof Zając
patchstack.com
6
0.001 Low
EPSS
Percentile
50.5%
Reflected Cross-Site Scripting (XSS) vulnerability discovered by Krzysztof Zając in WordPress All-in-one Floating Contact Form plugin (versions <= 2.0.3).
Solution
Update the WordPress All-in-one Floating Contact Form plugin to the latest available version (at least 2.0.4).
| CPE | Name | Operator | Version |
|---|---|---|---|
| all-in-one floating contact form | le | 2.0.3 |
Related
wpvulndb
wpvulndb
cvelist
cvelist
cnvd
cnvd
nvd
nvd
CVE-2022-0148
2022-02-07 16:16:38
cve
cve
CVE-2022-0148
2022-02-07 16:16:38
prion
prion
Cross site scripting
2022-02-07 16:16:00
nuclei
nuclei
WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting
2022-03-27 14:25:03
wpexploit
wpexploit