2 matches found
CVE-2022-1326
The Form - Contact Form WordPress plugin through 1.2.0 does not sanitize and escape Custom text fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
4.8CVSS0.00565EPSS
SaveExploits2References1
CVE-2022-1326
The Form - Contact Form WordPress plugin through 1.2.0 does not sanitize and escape Custom text fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
4.8CVSS5.5AI score0.00565EPSS
SaveExploits2References2
20