Lucene search
+L

3 matches found

OSV
OSV
added 2024/07/02 4:15 a.m.5 views

CVE-2024-5419

The Void Contact Form 7 Widget For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cf7redirectpage' attribute within the plugin's Void Contact From 7 widget in all versions up to, and including, 2.4 due to insufficient input sanitization and outpu...

5.4CVSS6AI score0.00341EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/07/02 1:58 a.m.6 views

WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via cf7_redirect_page Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via cf7redirectpage Attribute vulnerability discovered by wesley wcraft in WordPress Plugin Void Contact Form 7 Widget For Elementor Page Builder versions = 2.4...

6.4CVSS5.5AI score0.00341EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/03/13 12:0 a.m.4 views

WordPress plugin Void Contact Form 7 Widget For Elementor Page Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS7.7AI score0.00273EPSS
SaveExploits0References2
Rows per page
Query Builder