CVE-2024-5809

creationtimestamp| type| source ---|---|--- 2024-07-30 09:02:43+00:00| seen| https://t.me/cvedetector/1984...

CVE-2024-5809 WP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting

The WP Ajax Contact Form WordPress plugin through 2.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against admin users...

WordPress WP Ajax Contact Form Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)

Software WP Ajax Contact Form Type Plugin Vulnerable versions = 2.2.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5809 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d1bf246662eb Credits Bob Matyas...