2 matches found
CVE-2022-2116 Elementor Contact Form DB < 1.8.0 - Reflected Cross-Site Scripting
The Contact Form DB WordPress plugin before 1.8.0 does not sanitise and escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting...
6.2AI score0.00618EPSS
SaveExploits2References1
CVE-2022-2116: Improper Neutralization of Input During Web Page Generation
The Contact Form DB WordPress plugin before 1.8.0 does not sanitise and escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting...
6.1CVSS6.4AI score0.00618EPSS
SaveExploits2References2
20