Lucene search
+L

28 matches found

NVD
NVD
added 2022/05/25 4:15 p.m.26 views

CVE-2022-29408

Persistent Cross-Site Scripting XSS vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin = 1.8.7 at WordPress...

6.1CVSS0.00682EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/25 4:15 p.m.8 views

CVE-2022-29408

Persistent Cross-Site Scripting XSS vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin = 1.8.7 at WordPress...

6.1CVSS5.8AI score0.00682EPSS
SaveExploits0References2
Prion
Prion
added 2022/05/25 4:15 p.m.18 views

Cross site scripting

Persistent Cross-Site Scripting XSS vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin = 1.8.7 at WordPress...

4.3CVSS5.9AI score0.00682EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/05/25 3:58 p.m.104 views

CVE-2022-29408

The CVE-2022-29408 entry concerns Vsourz Digital’s WordPress plugin Advanced Contact form 7 DB (<= 1.8.7). Connected sources confirm a persistent (stored) Cross-Site Scripting (XSS) vulnerability, caused by insufficient sanitization/escaping of a parameter in the plugin’s form handling, enabli...

6.1CVSS5.2AI score0.00682EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/21 2:19 p.m.7 views

CVE-2022-29408

Persistent Cross-Site Scripting XSS vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin = 1.8.7 at WordPress...

6.1CVSS6.1AI score0.00682EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/03/21 12:00 a.m.12 views

WordPress plugin Advanced Contact form 7 DB 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability ...

8CVSS7.7AI score0.0077EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2019/08/07 12:00 a.m.42 views

WordPress Advanced Contact form 7 DB Plugin < 1.6.2 SQL Injection Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

9.8CVSS9.7AI score0.03995EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2019/07/26 12:00 a.m.30 views

WordPress Advanced Contact form 7 DB plugin <= 1.6.1 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by Tin Duong in WordPress Advanced Contact form 7 DB plugin versions = 1.6.1. Solution Update the WordPress Advanced Contact form 7 DB plugin to the latest available version at least 1.7.1...

9.8CVSS2.8AI score0.03995EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder