Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/05 8:16 a.m.•17 views

CVE-2026-5116

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...

4.4CVSS0.00311EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/05 6:37 a.m.•23 views

EUVD-2026-53176

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...

4.4CVSS6.1AI score0.00311EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/05 6:37 a.m.•17 views

CVE-2026-5116 Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...

4.4CVSS6.1AI score0.00311EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/08/05 6:37 a.m.•13 views

CVE-2026-5116

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...

4.4CVSS6.1AI score0.00311EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/05 6:37 a.m.•50 views

CVE-2026-5116 Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...

4.4CVSS0.00311EPSS
SaveExploits0References4
zdt
zdt
•added 2007/02/21 12:00 a.m.•52 views

DBImageGallery 1.2.2 (donsimg_base_path) RFI Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ DBImageGallery 1.2.2 donsimgbasepath RFI Vulnerabilities ============================================================ DBImageGallery 1.2.2 Found by Denven ERROR:...

7.1AI score
SaveExploits0
Rows per page
Query Builder