CVE-2025-23623

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on cf7-cc-avenue-add-on allows Reflected XSS.This issue affects Contact Form 7 – CCAvenue Add-on: from n/a through = 1.0...

EUVD-2025-3292

Malicious code in bioql PyPI...

CVE-2025-23623

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on cf7-cc-avenue-add-on allows Reflected XSS.This issue affects Contact Form 7 – CCAvenue Add-on: from n/a through = 1.0...

CVE-2025-23623

CVE-2025-23623 affects Contact Form 7 – CCAvenue Add-on (WordPress). Root cause: improper input neutralization during web page generation, allowing Reflected XSS. Documents show CVSS v3.1 base score 7.1 (HIGH). Connected sources confirm the vulnerability name and scope but provide no remediation ...

CVE-2025-23623 WordPress Contact Form 7 – CCAvenue Add-on plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on allows Reflected XSS.This issue affects Contact Form 7 – CCAvenue Add-on: from n/a through 1.0...

PT-2025-4981 · Unknown · Contact Form 7 – Ccavenue Add-On

Name of the Vulnerable Software and Affected Versions: Contact Form 7 – CCAvenue Add-on versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means that an...