PT-2022-13800

Name of the Vulnerable Software and Affected Versions The Form - Contact Form WordPress plugin versions prior to 1.2.1 Description The issue allows high-privileged users, such as admins, to perform Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitize and...

CVE-2022-1326: Improper Neutralization of Input During Web Page Generation

The Form - Contact Form WordPress plugin through 1.2.0 does not sanitize and escape Custom text fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...