CVE-2024-0239

creationtimestamp| type| source ---|---|--- 2024-01-23 19:17:38+00:00| seen| https://t.me/ctinow/172236 2024-02-06 13:46:58+00:00| seen| https://t.me/ctinow/179982 2025-05-09 16:25:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15767...

CVE-2024-0239

The Contact Form 7 Connector WordPress plugin before 1.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against administrators...

CVE-2024-0239 Contact Form 7 Connector < 1.2.3 - Reflected XSS

The Contact Form 7 Connector WordPress plugin before 1.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against administrators...

CVE-2024-0239 Contact Form 7 Connector < 1.2.3 - Reflected XSS

The Contact Form 7 Connector WordPress plugin before 1.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against administrators...

CVE-2024-0239

Affected software: WordPress plugin Contact Form 7 Connector (versions prior to 1.2.3). Vulnerability: Reflected Cross-Site Scripting due to insufficient sanitisation/escaping of a parameter before echoing it back to the page. Impact: could be exploited against administrators; exploitation contex...