Lucene search
+L

6 matches found

NVD
NVD
added 2026/08/05 8:16 a.m.11 views

CVE-2026-5116

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...

4.4CVSS0.00289EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/05 6:37 a.m.12 views

EUVD-2026-53176

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...

4.4CVSS5.7AI score0.00289EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/05 6:37 a.m.13 views

CVE-2026-5116 Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...

4.4CVSS5.7AI score0.00289EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/05 6:37 a.m.40 views

CVE-2026-5116 Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...

4.4CVSS0.00289EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/05 6:37 a.m.6 views

CVE-2026-5116

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...

4.4CVSS5.7AI score0.00289EPSS
SaveExploits0References5
zdt
zdt
added 2007/02/21 12:00 a.m.48 views

DBImageGallery 1.2.2 (donsimg_base_path) RFI Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ DBImageGallery 1.2.2 donsimgbasepath RFI Vulnerabilities ============================================================ DBImageGallery 1.2.2 Found by Denven ERROR:...

7.1AI score
SaveExploits0
Rows per page
Query Builder